My counter to your second point: Biometrics kinda disables mass hacks. you cant exactly chop off a huge number of fingers* Oh and one can also say "A password

My counter to your second point: Biometrics kinda disables mass hacks. you cant exactly chop off a huge number of fingers* Oh and one can also say "A password merely proves you know the password. No proof that you are the person associated with the password" * Though since passwords can be stored in hashes, they can be harder to steal as compared to biometric data which must be stored in raw (though possibly encrypted)