FaceID can be disabled. Reliably. Not sure I see what the issue is here.

You can also quickly, discreetly, and temporarily disable it, for instance if you are stopped by police. So this just isn't a real issue.