Biometrics are not being used as a password directly. They are typically used as an identifier to unlock the secrets store on the device and then retrieve an a

Biometrics are not being used as a password directly. They are typically used as an identifier to unlock the secrets store on the device and then retrieve an access token (which has previously been obtained via username/password authorisation). The biometric information never leaves the device.