KaiOS runs programs based on HTML5, and the applications run in a sandy environment, that is. They only access the phone’s resources/data if the user or the operating system allows it. But if the equipment is compromised or the device is stolen, putting a strong key is the only way to be completely secure.