I guess we have the Secure Folder already where you can install apps there and is locked via biometrics. You can even remove the secure folder from the app drawer (so only accessible via a quick tile). I personally use the secure folder for all my work apps.