Android Lolipop Quick Setting Pulldown When Device Is Locked

[Yoola]

To start off, I have Lenovo ZUK Z1 Android smartphone running Android Lolipop 5.1.1. with Cyanogen OS as stock.

And I've noticed I'm able to pull down the quick settings bar while device is locked and secured with PIN and fingerprint. I checked on few other devices such as Samsung Galaxy S6 running same android version 5.1.1. and it's same there. I guess it's the matter of Android version and that everyone with same version has the same?

I find that thing a little bit unsecure for my phone and kinda making any kind of anti-theft basic protections useless. I know everyone smarter would just turn it off and pull out the SIM Card or just get into recovery and wipe the data. But there are a lot of dumb thiefs too. I mean he can just steal my phone, turn off all kind of connectivity on my phone, including GPS and go away with that. I'm completely done with phone at that moment. Android Device Manager isn't gonna be avaliable to locate the phone or do anything.

So....My question is..

I'm I the only one who finds this unsecure a lot?

And also, what happens on Android Marshmallow regarding this? Will my upcoming update fix this? Can someone with Nexus device check up for me?

[Snickerzz]

I can only pull down the notification bar on 5.0.1 on my S4. 

[Yoola]

I think this is only the case on Android 5.1.1.

[Guest]

.

[Yoola]

I don't want to root my phone because people on xda forum reported that you're unable to get updates when you root this smartphone. And I have no more time to hassle with flashing custom recovery and checking if any update is up.

So I'm just wondering will the Marshmallow update fix it, because I'm supposed to get it in month or two.