Unlike other forms of strong authentication/2FA, the use of biometric data is particularly fraught with security concerns and considerations. Unlike "something you have" where card can be easily and quickly reissued, and "something you know" where a token can be easily and quickly replaced or a PIN can be changed even easier and quicker, the same can't be said about vocal patterns, fingerprints, iris images, and the like, in the event of a breach.