I've had the same issue, reported as FB13298801

Im sorry, but how did you create that beautiful screenshot?

Hi, I've filed a feature request with ID FB14855056

Hi Ziqiao, thank you for your reply. Yes you are correct, I assumed that privacySensitive() would redact any kind of information when the device is locked (just like on iOS). Personally, I think this should be intended behaviour. Nevertheless, the Data Protection entitlement was exactly what I was looking for! Adding the entitlement led to the desired result!