As I understand it, 'Windows Hello' requires a near-IR image alongside the RGB image.
It's not the fancy structured light of phone-style Face ID, but it still protects against the more common ways of fooling biometrics, like holding up a photo or wearing a simple paper mask.
Fair enough. That removes the virtual option, and you'll be forced to point the camera at your older brother.