> If the Touch ID sensor is bad, and you propose falling back to a PIN, who's to say the digitizer isn't compromised too and is recording touches?

So why not brick the phone out of the box? Even if the finger scanner is original, somebody may have compromised the digitizer anyway.