Biometric lockout
The OS turns off biometrics after repeated failed scans until the device passcode is entered.
Definition
Apps must offer a fallback (app password or device passcode) instead of leaving users stuck.
In practice
After five non-matching faces, Face ID is locked and the app should offer password login.