Clearly we seem to have a different idea of what constitutes "easy". I'm not claiming that biometric authentication is a good idea against a targeted attack.

Clearly we seem to have a different idea of what constitutes "easy". I'm not claiming that biometric authentication is a good idea against a targeted attack. But I do think that they offer adequate protection against opportunistic attacks. It prevents random thieves from accessing my data, and it's convenient enough that people actually use it. It will significantly increase security on average. If someone is targeting you specifically, neither a fingerprint nor a (usually short) passcode is adequate protection.