New here so not sure if this is the right place to ask.
If the phone is in AFU state and I'm using multiple users, when I log out of one of my other profiles and go back to the owner profile (so owner profile is AFU, but on lock screen), does an attacker first need to break into the AFU owner profile before he can try breaking into the secondary profiles (which are at rest)? Or can he directly attack the other profiles, ignoring the owner profile?