Mobile Me & Best Practice

Question

I may be the only one here but i philosophically see all iOS firmware as work in progress but one none the less that leads from the front. In saying this i wish to make known and get feedback from others of my thinking on best practice for the Mobile Me function that Apple has kindly made free:
It is of vital importance that legal owners of the iPhone have a _password lock_ on their hardware. If not then a dishonest person just needs to turn the Find My iPhone function off under the Mail setting; this would be easily overlooked otherwise and make the feature redundant.
Am I right in this assessment? Do others concur?

Answer 1

Actually, a passcode is unnecessary, you simply need a restrictions password, and to disable the changing of accounts.
And to address @cyclone34's point, if you have physical access to a device, then yes, you can totally override everything. As some of the greatest hackers (and anti-hackers) have stated, there are many arguments over how to make something secure and anti-hackable, but the number one agreed upon way to ensure not letting your information fall into the wrong hands is to not allow physical access by anyone except yourself.
Some may attempt to negate his point by stating that if the phone is introduced to a new computer and the iPhone has a passcode lock on it, you'll need the passcode to sync. Well, yes, but you can put the iPhone into DFU mode, to override this.