The same as stolen wallets. You only lose the cash on the phone. The thief can't get more money from the phone as that would require passwords he doesn't know.