SUMMARY
Add the option to require Android authentication before using sensitive functions, e.g., protecting the "run command" function with a fingerprint/pin-code.

As some functions are more dangerous than others, I think it could be configured per module. It doesn't matter too much when someone changes the currently playing song, but things like filetransfers, running commands, sending input, etc. should only be possible for authenticated users.