Anything that can be recorded can be forged. If they can replace the photo they can replace the biometrics.
If they can replace the photo they can replace the biometrics.
If your biometrics match your ID but do not match the data base wouldn’t you get detained until they can figure out why that is?
The biometrics are online so they can’t be changed. They don’t tamper with the picture. They just find matches. I have had two Mexican SIL’s so I have heard most of the tricks.