If the adult demanded the kid's phone password, it's rubber hose cryptanalysis. If the adult set up the password for the kid, it's a supply chain attack. Evil maid implies you don't know the password at all, which doesn't sound like the case here.