::
Apps need your private key to sign transactions and all happens inside the secure chip. If you don’t want the apps access your key, you can’t sign transactions.
There are some wallets that has no way to expose it’s keys, but then you cannot see your seed either. If your wallet gets broken or lost, say goodbye to your device.
If you want to use other private keys tied to another seed, you can use passphrase method, adding 25th word. This will make your addresses generated by a different seed on same device. Different seeds are activated by different pin locks.