Do your CC's not have fraud protection?
Worst he could access on my phone is my amazon account, which is logged in. He couldnt access my password, he couldnt change it without knowing it (for anything, gmail, amazon, etc). Just because something is logged in, doesnt mean its compromised beyond the ability to use it.
Thieves are not smart. They are not like us, in which we could have access to the persons entire life and own a house with a mortgage in their name from data mining their shit within a week. Thieves are thieves because theyre stupid and lazy. If they werent stupid and lazy, they wouldnt be doing petty shit like stealing phones.
Wow, that sounds like a lot of fun. I think I'll just lock my phone. Good luck tho