That is a good reason not to use face recognition.
Nope, just the ones you see caught.
Additionally TouchID is disabled after several hours of the device being unlocked. I presume FaceID is no different. So if you refuse to comply and they have to get a court order then the time limit may be reached.
You can even have the device wipe itself after 10 failed attempts to unlock it.
You could change the password on a regular basis as mitigation against prying eyes.