nzgeek: It looks like the "Require device unlock for NFC" setting was added all the way back in Android 10. You'd think that it'd be available on most mainstream phones by now.
I'm running a Pixel 3a, so it seems that Google are at least trying to maintain decent security on their own devices.
The most unsupported phone series in NZ and yet it has more sane settings.
For what it's worth when Westpac was rolling their own you HAD to unlock the phone but they also gave you the option of just being wake only or no security at all.
And of course on the other side on team Apple, you have to authorize via TouchID or FaceID or a Pin before it will even activate the reader.
I don't think you'll get consistency between different flavors of Android.
🤷♀️