...very high? I don't understand how this is unlikely, pretty much every phone owner with a google account is signed into that account on their phone.
> The criticism is based on the idea that most non-techie folks are unlikely to use a strong PIN _and are unlikely to set up strong biometrics._
On-device biometrics are typically _also_ used to unlock the device password manager, so my other remarks still apply. I bet a sizeable portion of the HN crowd also uses biometrics to unlock their well-configured password managers on their phone.
At least, that's what I personally do. Entering my very strong vault password every [lock duration] on a touch keyboard is already irritating enough; I'd rather just look at my phone to unlock my passwords when I need to use autofill.
At least in this case the thief has to steal the physical phone instead of guessing "password123" on the google signin prompt from the comfort of their home.
Also- how many non-techy people do you know that avoid using on-device biometrics? On my end, the number is approximately 0.