They're stealing destructive hashes of those things.
It'd be like having someone sketch a stick figure version of you, and then you claim your identity was stolen.
No, it wasn't. Stick figure drawings only work in stick figure readers.
And we can go up, even imaging quick DNA scanner, quick enough and smart, it does not change that much, your DNA can be grabbed around you in many way.
The essential point is simple: using your body means using an exposed key, using a password means using your brain that it's far harder to "expose". Also passwords are trivial enough, you can even check your keyboard for builtin keylogger, protect your environment from camera, microphone (phone/audio analyze to determine key's you press) etc. Try to hw check a biometric system and well... Good luck.