There is zero chance that client side verification is the only thing that will be used to authenticate purchases. Presumably the fingerprint is used to unlock your saved iTunes/iCloud password, which is then sent to Apple's servers and verified as usual. If your phone is stolen, change your password and they'll be locked out, fingerprint or no.