DeletedUser1131
I had a strong PIN on one of my profiles. I forgot it. I normally write down my PINs but not for this one.
The biggest threat to me right now is me. I've been practicing security for a long time, but I've always leaned toward being more secure than necessary. That sometimes leads to having an overly complicated setup. That's what I'm trying to fix. After all, threat modelling is all about determining what you should or shouldn't secure.
There is no real reason for me to have a PIN on this particular profile. But my question assumes a default profile. What exactly is on a default profile that would be pure gold to an adversary?
While I understand anyone can do whatever they like with their device, that advice isn't helpful. It's common sense. And the only way to be really secure is to turn off your phone and throw it into a ditch or live in a hut somewhere. I want to know, specifically, what threat would an unprotected profile pose, what could an adversary realistically do with said profile? You implied a profile without any sensitive data could still be valuable to an adversary - how? I'm hoping someone knowledgeable on this subject is able to contribute to this question rather than (as invariably happens to many discussions) turn into another one with trite aphorisms by people who aren't really saying anything.