They can also enforce you to use your fingerprint or face (in The Netherlands) but not PIN or password (in The Netherlands), both with proper (minimal) force. In UK, there's a law to force a user to give away their password. Which, IMO, is the same as being enforced to help your own conviction.