Yes, and I think Apple continually improves the algorithm and processing to avoid this.
But two people with nearly identical facial features can potentially spoof the system.
It does get better over time as Apple updates the algorithm.
Hopefully they are continuing to work on touchID under the glass... and will return this feature... I know they couldn’t get it to work, so faceID was the route they went...
Somehow I doubt it though.