There are a billion iphone users and so far no touchid “data leak” has occurred as far as I know. Not even sure what it would mean, since your face/fingerprints are only stored on device.

But even if I had to setup touchid or faceid every year, hell every month, using it is still a whole lot more convenient (and probably safer) than typing in a password 10 times a day.