There are a few ways that can and should be fixed to "fail closed". For instance, "locked" status should get stored somewhere outside the memory of any one process, so that if the system UI crashes, when it comes back up, before it displays any application, it should notice that it was previously in the locked state and go back to the locked state.