Last year, the Wall Street Journal reported a problem with iPhone Pass-codes.

You can view the entire video report here: https://www.youtube.com/watch?v=QUYODQB_2wQ)

This issue is being addressed in an IOS update

The new Stolen Device Feature update is being tested in 17.3 beta. When enabled, this new optional security feature limits what can be done and will make it harder for thieves to change your Apple ID password, pass-code, or view your other stored passwords, when you are away from your home, your office or any other familiar place. You will find this new security o under Settings > Face ID & Pass-code.

Currently, with just your iPhone pass-code, which could be stolen simply by watching a user enter it (like they did on the Wall Street Journal Report), a thief can change your Apple ID password and wipe your iPhone in a matter of minutes. With the new Stolen Device Protection feature enabled, it adds another layer of protection requiring your Face ID or Touch ID when away from your home, work, or other trusted location.

We are always looking out for ways to keep your and your personal information safe.