As far as I’ve used the CMF, password isn’t required to turn off the phone, which I think is a pretty big flaw in Android.
I suggest Nothing to ask for the Password before shutting the phone down.
I also find some jitters while using Play Store.
Please do merge this query if already asked.