Okay, so I'm thinking, "this poor guy is probably freaking out now..."
So let me try to calm you down a little.
1) Found/stolen phones are often immediately factory reset so they are harder to trace and then sold.
2) Even if not reset or cleared, someone would have to use an appropriate file browser to find anything at all.
2a) Then, he would have to either recognize the .MySecurityData folder as belonging to App Lock or simply have his curiosity piqued by such an oddly named folder.
2b) So, open the .MySecurityData folder and find a sub folder named "dont_remove." Hmmm...
2c) Open that folder and find dozens or hundreds of oddly named folders, most of which are basically empty, but they all contain sub folders named .image and .video. Hmmm...
2d) Find that some of those .image and .video folders contain files with odd names. But, what kind of files - there are no extensions? Hmmm...
2e) I wonder what happens if I rename one of those files with an image-type extension like .bmp. Nope, no good. .png? Nope, no good. .jpg? Hmmm...
I would put the odds that someone might find your stuff and view it at probably less than 10% overall.
But, sad to say, it can be done.