I will have to track back from my general conviction to run an unlocked bootloader, there’s a legitimate concern about temporary access to the phone with malicious intent …
(Source)
… while I’m still pretty certain the data would be safe if the phone simply got lost or stolen, but we’ll have to see, it seems I didn’t drill down on this enough. Sorry.