FWIW, on my phone I have a restrictions enabled, with a restriction on accounts. This effectively disables the ability to go into icloud on an unlocked phone without first going into restrictions, and enabling accounts. It's another level of protection, should I lose my iphone unlocked. The phone is set to lock in two minutes.
That's a good idea to have in place also.