I thought the point of using a pass code instead of fingerprint or facial recognition is that people can't search your phone without a warrant. You can say no. They can't get in without a warrant. It's not like BPA are gonna be super tech savvy and find a way around it real quick
