This is why intelligent security people abandoned biometric verification decades ago. Any biometric measure will eventually be spoofed. When someone spoofs your fingerprint, retinal scan, etc. you can’t switch to a new one.