Exactly. Biometrics are awful because 1. they can be compelled by force, 2. they can be physically collected, unbeknownst to the owner, 3. they share all the

Exactly. Biometrics are awful because 1. they can be compelled by force, 2. they can be physically collected, unbeknownst to the owner, 3. they share all the risks of digital passwords, including being leaked, 4. they can't ever be changed, even when known to be compromised by 1, 2, or 3. Much better to have 2+ passwords for deniable secrets. A unlocks the device. Most people only have this one "normal" password. B unlocks the device plus secret b, maybe some extra kinky porn so people feel they've found your real secret. C unlocks the device plus secret c, your real secret, maybe Bitcoin wallets or that novel you've been working on forever. If there's software on the device that does this, it's only evidence that 1+ secret dirs might exist. It should be impossible to tell that c exists, let alone compel its disclosure via C. But if b is quite stale, that's at least a hint that c might exist.