The solution here is a missing option for using biometrics along with the passcode. I feel the biometrics are too low of a barrier - so prefer using a passcode. However I have no issue with using biometrics along with the passcode such that entering the code is useless without my fingerprint or face. That leaves the problem of the passcode currently being used as an override for biometrics, but that can be solved with a different passcode for override or requiring the iCloud password to unlock.