There is a way to "bipass" the security key that you think protects your iphone. If the user knows what they are doing, they can have full access to your phone app, and can view your photos by adding a picture to one of your contacts. This should be fixed in 4.2
iOS 4.1 security bug: bypass passcode entry and access Phone, Photos apps