“A recently discovered Android vulnerability allows an attacker with physical access and a USB key to extract the device's PIN and all its data in 45 seconds, even if the phone is off.”