An unlocked device left alone hands a passerby a fully authenticated session — no hacking required. The reflex of locking your screen every time you step away closes a trivially exploitable gap that no firewall addresses.
“Step away, lock up. Every time.”