The timeout interval should be only 1 or 2 minutes. I locked it online remotely and remotely logged out of it when I realized it was lost several hours later. I almost always use the fingerprint to unlock, but do very occasionally use the swipe. It was protected by fingerprint and swipe.
I lost my Android phone on vacation that was in airplane mode (Moto G5, v7 updated).
