Username that is waaaay more difficult (if not impossible) to reproduce than any kind of password, even if the latter is known to the attacker (assuming facial

Username that is waaaay more difficult (if not impossible) to reproduce than any kind of password, even if the latter is known to the attacker (assuming facial recognition is implemented properly with the whole 3D face scanning and not just a flat image).