Graphene OS is a couple button presses away from "lockdown," it will require a code to get back in. There is also a setting that you can use that will put it into lockdown mode after sitting idle for too long. So Grapheme OS does offer some mitigations for biometric vulnerability.