An unlocked iPhone is useless if the unlocker itself steals your iCloud credentials, photos, contacts, or credit card information stored in your browser.
(Note: specific citations are omitted here; in a formal publication include up-to-date references from security firms, legal cases, and digital-rights organizations.)