>> then a fingerprint with a second factor pin as the secondary unlock

Unless you have a 4 or 4XL which are pretty popular with graphene os users. The weird thing is the 4 and 4XL are the only models without fingerprint because Google was pushing its #D Face Unlock System at the time.

The funny part is Graphene by default now disables face unlock on newer Pixel models.