I'm not sure it would have been that easy for them to back it up.

Depending on his settings.

You can disable the usb port entirely if you like, so that it is only possible to charge the device by switching it off. Or enable charging only when unlocked etc.

Or if his device had rebooted I don't think it would be possible to extract anything.