iPhones should stop falling back to the phone's passcode if the face/touch ID fails to authenticate to an app. What if your phone was stolen and the attacker knew your passcode?

Falling back to requiring to entering the app password over the phone passcode if face/touch ID fails is the logical way of protecting. Falling back to the passcode means not just your phone but potentially your whole life could be stolen.