Cook says any iOS device could be breached if this software were created. But other articles have led me to believe that any iOS model with touchid is immune du

Cook says any iOS device could be breached if this software were created. But other articles have led me to believe that any iOS model with touchid is immune due to the secure enclave being in play even for non-touch passcode access. Is this wrong?