Maybe but this should be limited to application data scope. What baffles me is that lock-screen is a system wide critical application and should in no way rely

Maybe but this should be limited to application data scope. What baffles me is that lock-screen is a system wide critical application and should in no way rely on this method. iOS lock screen in theory shouldn't only respond to cryptographic validation from the secure enclave.