Unless I'm missing something, it looks like the mobile app does not have any type of security/password/pin/fingerprint lock. Is this correct? 

This seems odd since almost all the other apps have such feature.