always allowed doesn’t seem to require the passcode

I have parental controls set. Recently discovered my child can go into settings > screen time > always allowed and add whatever games they want without it requiring a passcode. How can I either add “settings” app to the app limit or can apple add a passcode requirement for always allowed apps from their iPad.