You missed the important thing though - Touch ID has an attempt limit, so it only works something like five or ten times and then you need to enter the pin/pass

You missed the important thing though - Touch ID has an attempt limit, so it only works something like five or ten times and then you need to enter the pin/passcode. The attack in the article does not work to get around this, because Touch ID does not work at startup until you have entered the code. So brute forcing it is not going to work unless you have the passcode, in which case brute forcing it isn't super useful.