@Gargron I don't know, maybe because Apple isn't just decent software engineers, but some security people as well, trying to deliver actual solutions instead of mostly meaningless maxims. I'd seriously expect Apple blows everything else out of the water even with just fingerprints.
@Gargron So let's deliver system that by default will ask for a password that you'd need to type every single time you want to unlock the phone (without being seen), must be reasonably strong, that is long and complex, and if you ever manage to forget it, all that was on the phone is lost forever. That sounds like an amazing system.
both TouchID and FaceID are used ONLY as temporary access tokens only AFTER the user has been authenticated with their passcode
yes, biometrics are shitty passwords
but they are decent temporary access tokens
you can even manually revoke the token by clicking the lock button three times