Biometrics as a third factor to password and otp would be ideal. However biometrics as a second factor to otp is good enough, to make it frictionless. If that'

Biometrics as a third factor to password and otp would be ideal. However biometrics as a second factor to otp is good enough, to make it frictionless. If that's why it is broken, then I would be happy with it. Nobody is using fake biometrics to authenticate yet. And even then there is the second factor of otp.