That's a really good point. It lays bare some of my biases when it comes to thinking about and communicating with "normal people" about this sort of thing.

People having a bad memory is it enormous cost to institutions, which is why biometrics is so appealing in the first place.

Them being forever passwords is the value prop. The risk scene has changed, but that was essentially always the pitch.