@Dr Herbie:

Wear a mask or get a cheap 3D Printer.

Same with retina, you just setup a kiosk for your service, collect your own retina data from your customers, and use that to 3d print what info you collected, and use it on services other than yours.

Password has no physical attributes and you can easily setup different passwords, you only have one DNA, one retina, one fingerprint, they are bound to be compromised anyou cannot change them. The lack of multiple passwords, lack of reset, ans lack of recovery just turn the system useless.