When this happens, their algorithms and security systems detected something that is very likely an attempt at using an OS vulnerability to hack the phone and spy on the user.
Such attacks are extremely rare, and are usually very targeted, not just some Indian scammers trying to get your money.
The user would probably be at a very real risk.
There’s a reason why it automatically put the phone into Lockdown mode, even though in Lockdown mode the phone is halfway not usable.
So its like Israeli Hackers – when the US Government caught the phones of some terrorists the NSA wasn’t able to hack Apple and turned to the Israeli Gov who managed to hack the phone but wouldn’t tell apple how they did it
