At least on your phone, almost everything it can do that'd be 'dangerous' required your device to be unlocked or has a confirmation button (or both). Examples

At least on your phone, almost everything it can do that'd be 'dangerous' required your device to be unlocked or has a confirmation button (or both). Examples would be unlocking a door, opening your garage, sending an email/text message, sending Apple Pay Cash, etc.