AFAIK the app doesn’t even see the finger or anything, it basically just asks the OS to try to do fingerprint unlock and gets back a yes/no answer. Optionally it can decrypt a key using the TPM so the app can store keys securely such as a password.
Apps can use your lock screen pin or password too using the sameish API.