Face ID is severely lacking compared to MS Hello, simple as. It's at best 50:50 hit/miss compared to Hello which logs me in always. Granted, that figure doesn't include false positives, but the difference is substantial and makes Apple's implementation look really lame, to the point I'd like to see it removed.
I haven't had that happen, so I think it works fairly well. Even with a mask.
In fact, it works so well, for me, that I was worried that it was too generous, but it is actually very secure.