Yea, I haven't either , still seeing on the phone display that functions such as Nfc, bluetooth, volume and light toggle on/off (light was not activated), were changed without my input.
Also the phone started using google voice without me ever having set it.
I most definitly see that the security was compromized... Searching the web for exploits that are current and require no physical access will github quite a bit of things to read