Biometrics are not a secret and they are very easily stolen and used in replay attacks. They are not revocable or changeable. You should never ever use biometri

Biometrics are not a secret and they are very easily stolen and used in replay attacks. They are not revocable or changeable. You should never ever use biometrics as a core way of authentication. You can of course use it as an incremental additional signal. It would have been good if they mentioned the vendors that failed the test and the sole one that succeeded the test.