>otherwise you can swap the biometric system with one that is already unlocked.

But isn't the data on the device actually encrypted with the bio key?

So swapping out new bio data => new key => can't decrypt original data.

Or do you mean it just means you get a working device (but all stored data is lost)?