Hacker News Reader

Yes, touchId/faceId sits in between, it's quick access token, which is enough for 95% of the time, but those other 5% are very important.

Those other 5% might be too important to have your phone involved with them.

Or, if one needs those 5% moments on phones, it's always a possibility (as stated on the keynote) to add password additionally.