With luck, they might generate a valid wallet, which had been previously created, and which contains bitcoins
Similarly, a non malicious user might accidentally generate a duplicate wallet.
Imagine if you could see atoms that are in the entire universe. Now imagine if you randomly selected one atom out of the whole set. The chances of someone else also selecting the same atom is the same chance of someone else finding your seed phrase if chosen randomly.