In the US, using biometrics instead of a password cedes legal rights.