Two comments on that:

1) I wonder if the exploit here works with passcode lock on? I suspect it does not, because there’s no mention of passcode entry in the steps.

2) My rebuttal was going to be ‘but most kiosk devices don’t allow access to the power button’ - but this exploit requires that too.