MASVS-AUTH-3

The app secures sensitive operations with additional authentication.

---

Some additional form of authentication is often desirable for sensitive actions inside the app. This can be done in different ways (biometric, pin, MFA code generator, email, deep links, etc) and they all need to be implemented securely.