For most people a fingerprint scanner is just enough, an awful lot of people don't have any password or biometrics and even they just do fine. It's all about the threat, there's no right answer about how much security is enough security without assessing the threat factor.