> It falls short, because biometrics <> passwords. As I said, biometrics == identity. This is just dogma, it's not based on the actual implementation details.

> It falls short, because biometrics <> passwords. As I said, biometrics == identity. This is just dogma, it's not based on the actual implementation details. TouchID for the web requires: Something you are (biometric), and something you have (Your phone/ computer). If someone "Discovers" my fingerprints, they are worthless without the phone/ computer which has the Secure Enclave I've matched them to. If my phone is stolen, I can invalidate the entire device as a method of authentication.