2

Jie can use the app to do sensitive operations because the “unlocked key” is not used during the application flow

OWASP MASVS
AUTH-2, AUTH-3
OWASP MASTG
TEST-0017, TEST-0064
CAPEC
115
SAFECODE
28