Adding Fido doesn't require wallet authentication on sending

Feels like I must be missing something. I’ve gone thru the steps here

The weird part is it doesn’t require authentication to send ICP - just to login. Am I missing something or is this the way it’s supposed to work? This is a little concerning to me because if my computer was compromised & I was logged in, virus / hacker could send tokens without hardware device confirmation. It feels like I’m missing something here?

Is there a way to set this up to where it requires two device authentication on sends or something?

See post here for answer to this question - Ledger security device - #8 by kpeacock