Just to make it clear that this isn't a purely theoretical concern, it's how Windows Hello got bypassed this summer: https://www.wired.com/story/windows-hello-facial-recognition...