You can activate voice controls on your Android device in two ways: through the Google app and the Voice Access app.
Google Assistant can work on the lock screen, and anyone can access your phone. That's why you should disable Google Assistant on the lock screen.