While we're talking about silly(?) iOS design decisions, the one I can't get over is allowing users to change lock screen timeout without pin/faceid via Settings > Display & Brightness > Auto-lock. This should really be under Face ID & Passcode or Privacy & Security.

From a phone getting taken from your hand perspective, this is the first thing they will change.