On Android Lollipop, even with a PIN-enabled lock screen, it is possible to:
- Turn on/off Flight mode
- Turn on/off Location
- Turn on/off WiFi, Bluetooth, Mobile Data
- See all available WiFi and Bluetooth connections
- Enable/Disable Hotspot
- Turn on/off the torch
- Turn on/off phone sounds, and/or all interruptions.
etc, from the Quick Settings pull-down menu.
I can think of so many security risks this poses that I cannot justify that the reason for having this is purely for user convenience.
What is the rationale behind this design?