You'd have to be super serious about security to disable either of them. If you are a high ranking government official, or super secret spy, maybe. Because with

You'd have to be super serious about security to disable either of them. If you are a high ranking government official, or super secret spy, maybe. Because with FaceID they can't spoof it with a photo, they can't break into the secure enclave to get your facial map data, and even if they are able to take a high resolution 3D photo of your face and build an identical mask to your face, it probably won't work. This and TouchID are the most secure authorization features ever created, because 100% of people will use them,, and less than 1% will create long passcodes.