Fingerprints also have this issue. You only get ten of them that should last your entire life.

With cooperation, we can build 'revocable biometrics' that mix faces and fingerprints with a password or PIN. To revoke your biometric, simply forget your PIN.

The only thing you can do with these models is verify your claimed identity. They can't be used for search. So they're great for users, but not so great for evil establishments that want to search for terrorists or whatever in large biometrics databases.