The short answer is that passcodes are a very good idea. Ultimately, you cannot prevent your phone from being stolen, but you can prevent them from getting at any of the phones' contents. All a thief can do is a factory reset and even then, the wireless carrier might be willing to blackball the phone's serial number and effectively brick it.

Some advice from Apple here.