This category is about the system[1] protecting against unauthorized access (e.g., by persons other than the consumer).
[1] “System” includes the app itself (on the device) as well as its supporting infrastructure (e.g., cloud-based or other services provided outside the device)