Shouldn't that be the default, then? (I don't have an iPhone so I can't check it)
Being able to trigger it and make requests without looking at my phone is one of the key reasons I use it.
It's a convenience / security trade-off that is under the user's control in Settings.