> the closest thing that people can think of to a solution is "biometrics," which immediately raises lots of privacy concerns.

Is using FaceID a privacy concern? This mechanism can be built into phones much like passkeys.