> The researchers did not test their approach with real phones, and other security experts said the match rate would be significantly lower in real-life.

You are indeed correct. I wish someone would do a full test on how secure the readers are.