I think it’s only a matter of time, if it hasn’t happened already. When you scan your bio-metric data (fingerprint or whatever) it gets stored somewhere as a pattern of numbers. A clever and talented bad actor could, in theory, recreate or spoof that pattern of numbers in a variety of different ways. Hackers are very good at finding exploits that application coders never thought of. We have all sorts of virtual devices that emulate physical devices. It stands to reason that “virtual fingerprints” could easily be a thing.
Also, bio-metrics are “super easy and convenient” which has a tendency to make people get a little too apathetic / casual about security. And by people I mean everyone involved from the user up through all the layers of engineers and testers to the C-suite.
It’s an over-arching problem with security in general. Good security is both inconvenient and expensive. People want profits and convenience.
I’m going to hold off on using my bio-metrics for as long as I can. Though I can imagine a future where that is no longer possible, unfortunately