"But if we move toward authentication systems based solely on physical tokens or biometrics — things we have or things we are, rather than things we remember"

"But if we move toward authentication systems based solely on physical tokens or biometrics — things we have or things we are, rather than things we remember" If the argument is valid it seems that it could also be applied to public key encryption.