Hacker News Reader

No, because the touch-id is deactivated after 24h (or 48h, I'm not sure) of inactivity.

Assuming the attacker used Touch ID.

Not after 48 hours, when you have to use the PIN.

or maybe a well constructed fake using a finger print on file