The Secure Folder is designed to block access to photos and videos inside the folder, even when unlocked, if an app requests that a photo or video be inserted. However, this protection seems to work only if the app seeking access to the photos and videos is a personal one running from the main profile. If the app requesting access is a work profile app though, something different takes place.
Apparently, in this scenario, only photos and videos are vulnerable and any other type of data remains secure.
There is one bit of possible good news. If you have a work profile set up on your Galaxy device by your employer, and it was set up so that work files can not be accessed at all, the photos and videos residing in your Secure Folder might remain protected. You can also try to prevent photos and videos from being viewed outside of the Secure Folder by encrypting it. Not encrypted by default, if you open the menu belonging to the Secure Folder and select the “encrypt” option, it will prevent the Android photo picker from getting to the Secure Folder’s files.
Another flaw in Secure Folder could show anyone which apps are in your Secure Folder. Going to Settings > Security and privacy > More privacy settings > Permission Manager and tapping on a permission will show someone with malicious intent which apps you have installed in the folder. Usually, tapping on the Location permission will reveal many of these apps.
Hopefully, Samsung will tighten things up with its Secure Folder before it becomes known as the in-Secure Folder. Make sure you have encryption enabled for your Secure Folder. It could save someone you don’t know from grabbing your Galaxy device and viewing photos and videos that you thought were protected.