Questions have been raised about the feasibility of biometrics as an authentication method if the data was hacked.