But when locked it throws away the keys to the storage in memory so they need to be retrieved from the Secure Enclave again through device password.
So without an absolutely amazing exploit all your data on device is totally inaccessible.