But the author seems to misunderstand how it works almost completely. FaceID or TouchID protect access to the device which protects the ID, that’s the biometric

But the author seems to misunderstand how it works almost completely. FaceID or TouchID protect access to the device which protects the ID, that’s the biometric part, there is nothing I see that requires or implies biometric data is used for anything else.