[mothered]

As with all accounts and devices, biometric authentication will also have recovery options In case of failure. So ultimately, It's the recovery credentials protecting the account/device and not biometrics.

Interesting viewing pertaining to online accounts and number of passwords used. A few years ago, I performed my very own research on a random user and his accounts. After a few weeks of testing and compromising, I Identified that he'd used the same login credentials (email:pass) for 30+ accounts.

Users are becoming more and more complacent with their online habits and as such, security (client-side) will continue to decline.