I agree that widgets should not be able to bypass security but the behavior is a design flaw. The system should be intelligent enough to prompt for security PIN if someone clicks on the widgets not restrict widgets completely. That's a sledge hammer approach by android developers. If a user...