PIN-locked SIM card? No problem. It’s easy for an attacker to bypass the Google Pixel lock screen on unpatched devices.