That is a good point yes. Either that or display the password prompt even if the biometric does not pass.