If you don't have physical control of the device when it is in an unlocked state, all bets are off for data integrity. I'd be more worried about someone racking up a huge phone bill with my phone than them getting an IM password.