Currently, they can't compel you to give up your fingerprint, but can force a password. So I think thoughts would count as a biologic rather than a generated phrase in that aspect.