Google is fixing an Android lock screen vulnerability that lets anyone access Gemini to send SMS without requiring a PIN.