>if your phone is stolen with the banking app open, you're screwed

With my one not really as you still have to enter a simple password to do anything - six letters, no dumb requirements for capitals and odd symbols.

There is something to be said for simple passwords that people can actually remember. They don't work in situations where hackers can try loads of attempts electronically but where you have to type them if they are quite good really.