There is no PIN or any type of security on the wallet.  When you logout, you can login without any type of PIN or Password.

How can WAVES overlook something so basic?  If anyone has your phone, they can access your wallet.

Anyone else find this to be a major flaw?  Is there something I am missing?