They did, the exploit here is shutting down the phone before it has a chance to log there was a password attempt.