Maybe but this should be limited to application data scope.

What baffles me is that lock-screen is a system wide critical application and should in no way rely on this method.

iOS lock screen in theory shouldn't only respond to cryptographic validation from the secure enclave.