This issue has been talked about for years, courts have been saying that your face and/or fingerprint can be compelled to unlock your phone while they can’t force you to give up the pass code in your head. John Gruber wrote about this a few years ago, and the article contains some good advice that everyone should heed.