> Major phone OS makers (all, what, 2 of them?) need to allow you to have at least 2 authentication paths - one when you are in a physically secure location, an

> Major phone OS makers (all, what, 2 of them?) need to allow you to have at least 2 authentication paths - one when you are in a physically secure location, and one when your phone could be snooped or stolen. It's a fundamental need for phones. I feel like this is being done with the hierarchy of how biometric unlocks work on the phones. Your most common logins can be biometric and are generally considered things that cannot be snooped or stolen though they may be coerced. At least on iOS, it is generally easily possible to make sure that you only ever use biometric unlocks in public spaces and spaces you are worried about being snooped (spaces outside of your home). It's also possible to be afraid of coercion and temporarily disable biometrics with a quick button press. Presuming of course that you trust the biometric unlocks in the first place. But if you trust them, then that definitely gives you two authentication paths, one of which is harder to snoop/steal than the other.