If someone gets into your unlocked phone, an unprotected authenticator app hands them every code. Enabling the app's own PIN or fingerprint lock adds a final barrier even if your phone falls into the wrong hands.
“The app that guards your accounts deserves a lock of its own.”