Re: How is alphagoog off the hook here?
Is it really hard to stop this? In the case of contacts when the device is locked return an empty list of contacts to the app, in the case of photos, apply the same logic and the same to everything else. That's the easiest immediate solution, done properly, throw an exception and let the app deal with advising the user the device is not unlocked. Done even better, ask the user to unlock when the request to access these resources is requested by the app.