To put it another way, biometrics can support ACL-based authorization, but not capability-based authorization. However, since the entire world is using ACL-based authorization anyway, it's not a practical limitation.