I've never understood why anyone would be comfortable with Face ID or Touch ID given all the possible attacks. Just use a PIN. You'll end up knowing it as a kinesthetic reflexive action anyways.