As I understand it, 'Windows Hello' requires a near-IR image alongside the RGB image.

It's not the fancy structured light of phone-style Face ID, but it still protects against the more common ways of fooling biometrics, like holding up a photo or wearing a simple paper mask.

Fair enough. That removes the virtual option, and you'll be forced to point the camera at your older brother.