Biometrics are form of (dubious) in-person identification, and their use for access control belongs in the all-time stupidest ideas in computing list.
Like most security measures, biometrics are typically ‘good enough.’
True. Today. Tomorrow you will still have the same fingerprints.
Even if you cut large enough to create a scar, you'd just re-register the new print and you're (allegedly) vulnerable to this attack again.
Most of those require being loated in the same area and generally even at a similar time (for high use areas). This would be more like the photo attack where you can be located far away.
Can you imagine how much it costs to pick fingerprints from millions of users by your method?
Sound can be recorded over the internet. This enables web sites to identify users in a very cheap way by simply adding a slider and sound recording on a web page overlay: "Slide to unlock contents".
Smartphone security is not going to get better any time in the next decade.
All of which lends weight to my argument that biometrics as access control is the single most ignorant idea in the history of computing. I am genuinely hard pressed to think of anything dumber.
If you refuse to give them your password, there's virtually no limit to the possible extent of the torture. You can't prove that further torture is pointless.
/s
If you're browing with javascript on and without text-only, you're missing a lot on the web ;)