It's not incorrect. At the bottom of the blog post, they explore different ways to "trick" people trying to look at the fingerprints
If that weren’t enough, my friend actually brainstormed a couple of other ways to improve the password.
like using three digits but tapping a phantom fourth number once the code is entered…. so there are four “tap prints” but only three which are relevant!