Security wise, maybe they could implement a feature where if you look at the phone with a recorded grimace (one eye closed, or blinking fast or raised eyebrows etc etc) it would disable faceid. So if someone wants to force you to unlock it you just comply and make a face