Yep, been like that as far back as I remember, many years, lol.
I think too many people complained about having to unlock the phone.
Can only do small purchases though.
No different than someone finding your wallet and using your debit card for tap, it requires no pin for that.