Reading "Firewalls Don't Stop Dragons" it pointed out a major problem with biometrics: besides the obvious problems with physical disfigurement, you can never "change password" so data breaches can never be recovered. Once hacked or framed, forever.