Assuming the hardware isn't being pushed to the accuracy limit for the sake of processing time, perhaps there could be an "enhanced security" mode that requires

Assuming the hardware isn't being pushed to the accuracy limit for the sake of processing time, perhaps there could be an "enhanced security" mode that requires a more thorough check? I suspect their 1:1,000,000 false-positive number is an extrapolation of the maximum allowable difference in measurement. They probably could have set that "fudge factor" to a value that corresponds to something like 1:1,000,000,000 and increased false negatives to 50%. Maybe it needs to see more "liveliness" and a few degrees head rotation? Overall I think with the alertness test, the 48-hour passcode lockout, the "press the lock button 5 times" panic mode, and a limit on all attempts is enough to discourage most three letter agencies. It seems to have been enough with TouchID.