I have a mobile phone running Android 6.0.1, even when the phone is locked, I still can access various settings from the quick settings menu, one of those is the wifi setting. However, when I enable it, I need to unlock my phone. What threat(s) are they trying to prevent by forcing me to do that?
I know that by enabling wifi, my phone will try to connect to all APs with the same name as the one I have saved, and if there is no password, it will connect. But what is the worst that could happen?