In a couple of videos, which Zdziarski says have been posted to show that the iPhone 3GS - the latest version of the popular Apple mobile - is unsuitable for enterprise usage, he highlights the flaws.
One of them, Infosecurity notes, shows how an attacker can remove a passcode and get to data on the device.
"Now law enforcement has all of the tools that they need to be able to do this," he said in the video.
"The problem is the bad guys also do too. So while this is good for forensic purposes, it's also quite terrible for the rest of us in terms of our own private security," he added.
In the second YouTube video, he showed how a hacker can use software tools to download a raw `disk image' from the handset, that could provide personal information, deleted voice mails and other data.
The irony of Zdziarski's videos is that Apple is promoting the new version of the iPhone - which includes hardware encryption as standard - as suitable for enterprise deployments.