What you are is one factor. What happened to MFA approach here? Also it is a factor we cannot change, so if someone obtain a video of our face like that or success in making a working fake, we cannot change our look like we can with a password.