The bottomline is that someone doesn't need to hack a server to steal your fingerprint, you leave those everywhere you go as virtual gifts to any passers-by. All they need to do is steal your phone, and that's pick-pocketing level easy.

Ummm, if I lose my phone, I'm just going to remotely disable it so there's no way the person who stole my phone can reach my data.

So, you're using full-disk encryption on your phone and the remote kill switch flushes the key?

Otherwise the data is still there in the plain, accessible by anyone who can read the flash.

If you're using a Nexus 5X or 6P on Android 6, then probably yes.

Android 5 has full disk encryption but was disabled by default on the Nexus 5 (and most other phones) due to performance issues.

Do the Nexus 5X or 6P finally have hardware encryption support ?

I didn't notice any mention of those, specially because they failed miserably last year parading full disk encryption on Nexus 6 and got bitten when reviews showed the performance degradation and lack of hardware encryption.

It's a good question, I've looked and the Qualcomm Snapdragon 810 has the support needed, but I don't know if it'll be enabled by default or not in Android 6.

If it's not, then Google are starting to take the piss..

Except that you can't choose a different fingerprint for each app/site. Lose it once and all your accounts are compromised.

All the apps that I use give me the option to not use fingerprint login.

*steal your password