Being able to unlock someone else's phone with a picture of their face has been a bug for the same length of time.