How come there is no security for the WAVES Wallet (Android)

It asks for PIN and Password, etc. however if you log out, you can log in again without using the PIN/Password.  This seems like a very obvious security flaw.

Is there an update or fix coming soon?