Plenty of apps offer to lock themselves with a passcode or Face ID. In most, the lock is exactly what it looks like: a screen drawn over the top. The notes underneath are ordinary files. Anyone who copies them off the disk, restores them from a backup, or opens the app’s folder reads everything without meeting the lock at all.
This guide covers the difference, and what app lock does in Dash.