Security codes when accessing the Dropbox Passwords App

As far as I can tell from the community and from my own app (and poking around the web),  the Android DB passwords app relies only on the phone/tablet's security. Typically, if people are forced under coercion to hand over their phone, the thieves will ask for the phone code (under threat). They can then access DB passwords app, because the app does not seem to have any native security, as do banking apps and such. It would seem like a massive oversight....