It's not clear why I have to provide evidence that my phone has any vulnerabilities to justify being my being uncomfortable handing it to a stranger with a known criminal past. Security comes in layers and one of those layers is physical security.

How about swap of parts / chips / batteries ? Damaged vs new vs be-broken-soon ?

Same people make very good living of it. Customer retention and profit^2. Poor those non geeks souls.