It won't be able to popup behind the locked screen because of the security issues you mention, but you can still use the app through voice. The worst an attacker that got hold of your phone could do is use the app to send text messages and read any messages that the phone received while they had control of it.