Also, at least in the US biometric data is not protected. Passwords still are. After I learned that, I stopped using fingerprint readers and have never used facial unlocking.