Hmm, I thought Apple had switched to requiring pin/watch for face ID unlocks because they were not totally secure.
The same could be said for fingerprint though. I think the more secure biometric unlocks require the occasional pin verification anyways.