[Geee]

If the attacker had remote access to his computer, he could find the photo on iCloud and also could have seen the seed phrase through webcam.