Use siri to get around the password screen. Say you set up a password and leave your phone on your desk, you believe it is secure, it is not.
Your friends can access your sms, calendar, twitter and other accounts.