The claim seems kind of dubious. The information they were able to get were: the last four digits of the GW account, a list of purchased items, and the remaining balance. These items are pretty useless. It's like looking at someone's ATM receipt and a few store receipts and claiming that you were on the verge of robbing them blind. The phone would have to be rooted and the information is only obtainable with physical access to the phone. So what this tells me is this...
You would have to root your phone, and not have a password lock on it. Someone would then have to physically steal the phone, and, in the end, all they could get from it would be three items of useless information.
If someone had you targeted for identity theft for fraudulent purchases they'd be better off just stealing your wallet or purse if they had physical access to you. Then, they would have your ID and credit cards. If they stole your phone for GW access they'd still need your purchase pin. They would, however have a sweet list of stuff you already bought and an account balance that they don't have access to.
Who paid for this "study". I'm not saying GW is awesome and invincible, but this... this smells fishy, half baked, and sensationalist.
I smell FUD.
