> To my knowledge, Apple has not had any insider compromise of activation lock.

First they would have to get caught.

> This is why criminals try to phish the credentials from the victim instead.

Either method would be effective and not every criminal would have access to an insider, or they would have to pay off the insider for each device and then still prefer to phish the customer if possible to avoid paying the bribe.