Read the linked post. It explains why the distinction needs to be made between identity and authn/authz. Point being biometrics is a bad idea to start with. Ca

Read the linked post. It explains why the distinction needs to be made between identity and authn/authz. Point being biometrics is a bad idea to start with. CapitalOne doing this means they are failing to make the same distinction much like a 6 char password minimum etc. etc.