That's madness! I think some people just don't understand basic opsec, and the importance of securing your devices when they're not in use. Especially in a coffee shop where all sorts of characters are lurking. It doesn't take a skilled scoundrel more than a few seconds to access sensitive information if the device is left unlocked.