Isn’t this a classic example of the fragility of biometrics?

If I move to a new device, iOS should be required to give up whatever secret key my face translates to, so I can log into websites.

Simplistically, if iOS silently turned my face into the web password “g0rG0il3r”, when I eventually migrate from iOS to something new, I’ll have to be able take my face password with me, thus exposing that my face was only ever equivalent to a password in the first place?