An attacker would definitely need physical access ... to protect your iPhone from this hack by disabling Siri's lock screen access; the option to do that can be found in Settings > Face ID ...