It will be super easy to fake regardless. Based on how I've seen their system just a scan from the screen of another friend will do the job. There is no biometric crosscheck and I think we should never get to that. We don't need such complicated solutions with massive privacy risks for relatively small problems.