Yes, my concern as well. At the end of the day they’re still collecting something you can’t change or revoke. It’s not like resetting a password, once your biometrics are out there, that’s it.
personally i think biometrics should be treated as username not a password.