I'm not convinced. To get someone's passcode, I have to watch them type it in; something that happens in few places, at few times, and when they do it they will

I'm not convinced. To get someone's passcode, I have to watch them type it in; something that happens in few places, at few times, and when they do it they will be aware of the need to not let me shouldersurf. To get someone's fingerprints, I can simply wait until they touch something, or if I don't want to do it that way, I can take a picture of their fingers. I could do this from a distance without them ever knowing. Sure, once I have their passcode, it's a lot easier that making the physical fake fingerprint, but getting a copy of their fingerprint is easy.