They already have access to your banking data, they won't need your codes. They would probably be entitled to asking for your wallet password, yes.

Of course they can steal your stuff; it happens with physical evidence (fairly routinely, in many areas - do you really think all that sequestered ganja gets destroyed?), so it can happen with digital stuff too. There are laws and rules about this, but no physical impediment afaik.