Whenever this comes up, my buddy says "biometrics are for usernames, not passwords".

I agree. I was merely saying that these were (and still are?) widely promoted even though the various problems were (are) well-known (and now intensified by AI).