every prompt to set it up indicates otherwise, they really really want you to set up biometric auth, however the gov't can make you provide biometric unlock, whereas they cannot compel a password or real "passkey" (pin)