First of all it is not possible to create a wallet without storing the private keys since many wallets doesn't support the copy past of private keys, the user needs to manually enters the private keys for that he need to memorize the private keys or seeds then have to re-enter to create a wallet successfully.
Literally, it is not possible to access the wallet without the private keys but there is a way to access the funds without entering into their wallet via clipboard malware by using this the hacker can change the actual destination address into the hacker's address and receive the funds into their wallets.
I think it's possible if the victim phone/dekstop was hacked and the hacker will monitoring or controlling their device then make an transaction from there beside that Clipboard malware was also dangerous, i still remember around 2018 when it change automatically change to the hacker address if they detect BTC or ETH Address, We just need to be more careful and don't install any suspicous apps or click the link.