Last time I checked the OS actively warns you that a strong password is the only way to actually secure your device. Face unlocks and fingerprint sensors are really just gimmicks, that's why android will sometimes prompt for the full password based on some heuristics.

Just because Samsung's sloppy copies of Apple's tech are sucky does not mean that the real technologies are "gimmicks".

apple's scotsman is not true either: https://www.ccc.de/en/updates/2013/ccc-breaks-apple-touchid

From your link:

The process described above proved to be somewhat unreliable as the depth of the ridges created by the toner was a little too shallow. Therefore an alternative process based on the same principle was utilized and has been demonstrated in an extended video available here. First, the residual fingerprint from the phone is either photographed or scanned with a flatbed scanner at 2400 dpi. Then the image is converted to black & white, inverted and mirrored. This image is then printed onto transparent sheet at 1200 dpi. To create the mold, the mask is then used to expose the fingerprint structure on photo-senistive PCB material. The PCB material is then developed, etched and cleaned. After this process, the mold is ready. A thin coat of graphite spray is applied to ensure an improved capacitive response. This also makes it easier to remove the fake fingerprint. Finally a thin film of white wood glue is smeared into the mold. After the glue cures the new fake fingerprint is ready for use."

I'm not sure I would classify a process like that as being similar to putting a screen protector on.

They should disable those gimmicks and remove them from all advertising, comparison charts, etc.

given this, it would be nice if a standard emerged of offering biometric+password. The idea being you get both the convenience of biometric, plus the security of a password. Of course a password is inconvenient, but thats only if its a usual password. In this case you could use a simplified password which is quick to enter.