Agree that this is a huge security flaw, and I’m surprised this has been an issue for at least two years now. At the very least, I think the entire biometric unlock feature should be disabled until a fix arrives for this and the issue posted by @remestore.