Google Assistant can work on the lock screen, and anyone can access your phone. That's why you should disable Google Assistant on the lock screen.