If you're sending the biometric over the network you're doing it wrong. Apple uses a secure enclave and the biometric (fingerprint or facial scan) never gets extracted from the chip, ever.