I have auto lock disabled, because I'm the one to decide when I don't need to look at my screen anymore. But that's different from not requiring faceid/passcode upon unlock.
edit: I just checked and indeed the settings screen says it watches for attention, so I'm willing to give it a try and enable auto unlock now...