what? Apple does not have your face or fingerprints. FaceID and TouchID both record any data they need in parts of the enclave that can't be used for anything

what? Apple does not have your face or fingerprints. FaceID and TouchID both record any data they need in parts of the enclave that can't be used for anything else, and cannot be extracted. The information that they do store is not a picture, and cannot be reversed even in the case where someone does manage to get that data. They have repeatedly documented how these features work. Similarly touchid and faceid aren't sending your touchid/faceid data to a third party (because again, even if they wanted to, they can't), they're simply gating access to credential data on successful local authentication.