In terms of security vs convenience though, I'm not going to enter a decent passphrase into my phone many times per day. A short passcode can trivially be shoulder-surfed, so FaceID is still better security than what I otherwise would be using, even if it's not perfect. The convenience also lets me have more apps individually locked, meaning I can hand an unlocked device to someone knowing they still have somewhat limited access.