if someone doesn’t have touch id setup you can take their ios device and mis-enter the password a bunch, wait the timeout, typically 10min, and misenter them again, locking the device forever making them have to factory reset and lose any non-backed up data. nothing they can do to unlock it even with all the passwords in the world unless they have touch id. all their photos, everything, gone.
basically, you can’t and should never use an ios device as your primary device, ever. without a computer setup with itunes, and the touch id setup as a secondary login method, you can be locked out of your own device and have your data wiped by anyone with casual access to the locked device. a sibling, child, spouse, friend, room mate, they don’t need a password, just to mash misenter, and bam.
apple sucks.