You're focusing on whether it's the phone owner's fault or the thief's fault, my point is that it isn't the app's fault.