Actually a small class of attackers - script kiddies with a commonly available file explorer tool and physical access to your phone.