On my Verizon Galaxy S8+ I can Bypasses the fingerprint requirement and pin by just clicking the power button or home button, saying ok Google, and backing out. Seems like a rather big oversight
I wouldn't call it an oversight.. Ok Google uses trusted voice.. You are the only one that should
be able to do that. I do it now, and have done that on the S7 edge