Quick Settings / notification shade is accessible on the lock screen, allowing unauthenticated state changes (e.g., Sound Mode → Silent; in some builds, connectivity toggles).
Impact: • Violates lock-screen trust boundary • Can disable audible alerts → Find My Mobile / ring-to-locate fails • Affects theft recovery and emergency use cases
Expected: State-changing actions affecting alerting or connectivity should either:
Require authentication, or
Be disabled on lock screen via a user setting
Request: Add a toggle to disable lock-screen Quick Settings or enforce authentication for sensitive toggles.
Sharing as security-focused feedback for the One UI team.One UI allows Quick Settings access on the lock screen, letting anyone mute the phone without authentication. This can break Find My Mobile / device recovery.
Please add a toggle to disable lock-screen Quick Settings or require authentication for sensitive actions.
Thank you for sharing your feedback. We welcome your suggestion and appreciate the time and effort you have spent to share your valuable comments. This will help us to improve our services.
