This is very true. A while back I told my kid when he got a new iPhone to use a password not his thumbprint. They can’t make you give up your password, but the cops can use your own fingerprint against you.
Hold your finger weird so it can’t be read and it requires a passcode after two misreads.