In the U.S. at least, passwords are protected under the 5th amendment but you can be ordered to unlock a phone with a fingerprint or a face since it's something you are and not something you know.

> passwords are protected under the 5th amendment

This is not the case, at least, the law is not very settled in that direction. There has been at least one famous case [0] where an appeals court found that a defendant could be help in contempt of court and imprisoned for refusing to provide his password.

[0] https://www.theregister.com/2017/03/20/appeals_court_contemp...

State actors would have zero issues lifting a fingerprint off a phone, then making a prop for the sensor. Alternatively all they need is a minor tranquilizer and there you go, provided the human asset is available.

Sorry I was unclear, I meant "cutting fingers" as an example of torture meant to extract passwords, not in the sense that they'd use the finger to unlock the phone. Face-ID and fingerprints share the same issues compared to a password.