Mostly agree - although you can only use TouchID now to unlock your phone and buy stuff from Apple. So I think they probably want to give it a year out in the wild to see exactly how secure it is, so they can then unleash it with an API to developers.

That's my hunch.