[lcnPylGDnU4H9OF]

Those are all factors in multi-factor authentication. If a service does not require the "something you are" there's still good security if they require the other two factors. If the only required factor is "something you are" that's bad security.

[newaccount74]

They all require the "something you have" as well. Pretty much all the face recognition / finger print tech on mobiles is locked to a single device.