I think you're being too quick to rule out iCloud. The exploit that was reportedly discovered over the weekend would have needed to supply the victim's iCloud ID - which is typically an email address, rather than a phone number or IMEI number. Note I said "supply" and not "know". Since the exploit allowed for a brute…