You're hitting at the difference between identification and authentication. We use tokens/passwords/etc for authentication of a public ID. I feel like one's fin

You're hitting at the difference between identification and authentication. We use tokens/passwords/etc for authentication of a public ID. I feel like one's fingerprint is pretty commonly used as an identifier, so using it for a password (heck, engineering it into your system in the first place) is terrible.