To say that a boarding pass is “something you have” in a security sense is absurd. I can print your boarding pass merely by knowing your name and where you’re going. A biometric check (backed by a paper ID check) is a dramatic security upgrade over that.