Wouldn't it make the most sense then from a security and privacy perspective to require a fingerprint AND a "pin" or password from one's personal memory [stored

Wouldn't it make the most sense then from a security and privacy perspective to require a fingerprint AND a "pin" or password from one's personal memory [stored in their head]? Why not just do that?