Its not that hard to just disable Siri on the lock screen. That being said, disabled should be the default setting. Its not really a security problem, as its an option you can turn on and off, just the default setting is not the most secure and some users may not know to check it before assuming...