Oh, they "only" need to get access to the phone which is already logged into a Google account, shows all the emails, personal photos, contacts, messages and everything else? Including personal notes?