Maybe I'm being naive but why don't they store hashes of the biometrics on the server instead? Then just change the hashing algorithm if there's a compromise?