Scott Cake Wallet always requires a 6 digit PIN, you can also use biometrics, but it's optional. They recently added an option for 2FA, which requires a TOTP token in addition to your PIN/biometrics to access your wallet, make a payment (you can configure for which actions 2FA is needed). I think the most security comes from running the wallet on a secure device with GrapheneOS, not from the wallet itself.