content: A software hole means they could do it without possession of the device. These phones store the fingerprint as an unencrypted file on the device. As the article says in the HTC One Max any app on the phone can read the unencrypted fingerprint file.