But these apps shouldn't be running/accessing those devices when your phone is locked. If the apps can manage to get around that permissioning issue then they

But these apps shouldn't be running/accessing those devices when your phone is locked. If the apps can manage to get around that permissioning issue then they can control a lot of things directly, most likely, and don't need your PIN for much.