What do you even mean by that? On iOS any app can request a TouchID authentication for upgraded privileges. Would be surprised if something similar weren't possible. 1Password on iOS uses TouchID. It's certainly not unencrypted at rest.

That's the goal - I provide my TouchID + maybe a PIN (or if for added security, combined with separate channel factor).