I’ve been following an interesting thread on privacy forums lately about Face ID and biometric authentication. The consensus from the privacy-conscious crowd seems to be: ditch Face ID immediately, it’s a security nightmare. But here’s the thing – after reading through dozens of comments and thinking about my own usage patterns, I reckon most of this advice is actually making people less secure, not more.

The argument goes like this: law enforcement can compel you to unlock your phone with your face, but they can’t force you to reveal your password. Technically true, particularly in the US with their Fifth Amendment protections. But this laser focus on one specific threat scenario completely ignores the far more common risks most of us face every single day.