Exactly. Someone mining Facebook could build a directory of doppelgängers near each person. A little social engineering could get a bystander to unlock the target's phone without them even realizing they are facilitating a crime.