This is weird. On one side, why would you give your passcode to a device that contains a lot of stuff, usually financial apps, message history, in a lot of cases access to corporate information... and eventually nudes.

On other side, as a technician, how retarded you must be to have access to all this data and to take nudes and post them online. Like whats the end game? What sort of outcome do you expect?

This is just like the story that happened few weeks ago, when someone gained access to a popular npm packages and uploaded the most obviously visible crypto stealer.