I wish that Apple would make a way to require both FaceID and a passcode. This seems like an easy option to add.

GrapheneOS has Touch ID and a passcode as an option.

And what happens when your Touch ID stops working I find biometrics to be quite fragile.

You still have a separate password that authenticates you without biometrics.

The touch + passcode is nice because even if someone watches you enter your passcode it won't matter unless they can spoof the fingerprint reader too, which is highly unlikely. And you can use a much shorter passcode for convenience.

Wash your hands? /s

Something you have + Something you know. SOP.

Don't 99% of people just use face or fingerprint unlocking?

That's besides the point. It's still a massive intrusion of privacy.

It's like a stranger looking over your shoulder, and you can't even tell it to bounce.

I wonder, if police wanted to search your phone, can they unlock with your fingerprint against your will?

No, in the UK they can't just take your finger and press it to your phone or point it at your face to unlock it. They can service you a notice demanding access to your phone, and not providing access is a crime.

In most countries they can. Which is why you should (in a perfect world) have password or fingerprint unlock, and if you use the fingerprint, the phone wipes itself. Not even Graphene supports this.

Wouldn't that lead you to getting charged for destruction of evidence?

Only if you told the police to unlock the phone with your fingerprint. If they did it without your involvement, it's allowed.

Yes, but wouldn't the fact that you intentionally set the phone up to wipe itself be enough to charge you for that? You've pretty much made a booby trap for the police.

Yes.