We treat biometrics like a secret (i.e. password), but really it's not much better than public information (i.e. username).