I think some clarification needs to be made here because this is a bit misleading. The problem is there are actually two issues being discussed here which is making this thing technically confusing.

So McAfee is talking about getting passed the authentication (I think and hope for his sake) on the phone, such as the lockscreen etc. In that case, what he is talking about is absolutely true. It is trivial to get passed that lockscreen on your phone by reading the instructions. Even if your password were hashed (which means non-reversable, so the hacker couldn't figure out what your password was), it would be a case of merely rewriting the instructions to bypass the authentication method altogether, which could be done in various ways.

However there is another side to this which is causing confusion. On phones now, just like on most modern operating systems, there is functionality to actually "encrypt" your entire device with a password. How these works is they use an encryption algorithm like AES in combination with your password to encrypt the entire contents of your device's storage into a format that is unreadable to someone without the password. There is no known way to break into this or decrypt the data without the password. It is for all intents and purposes, impossible and likely will be for a long time.

This is not to be confused with just having a lock screen though. Having a lock screen is not secure. Just the same as on your laptop or PC just having a password is not secure. Your data is 100% vulnerable and extremely easy to access. Much easier than even McAfee is implying in this video. If you want to secure your data, you need to actually encrypt it with a password. This can be done using FileVault on Mac OS X, Bitlocker on Windows and in the settings somewhere of your Android or iOS phone. If you have encrypted your data, there is absolutely no way to gain access to it without your password or without getting a virus on your device while you're using it.