no matter what security you use when the attacker gets access to your (unlocked) phone you are fucked either way.

Data will always be on the end device unless you turn on disappearing messages which you can if you are concerned about that