A private security company ask people to give valuable biometric data. No reason to trust what they said, furthermore without step to reproduce.

However from this article :

The professor noted that, in many cases, users aren’t told how to create a good modern password, and in other cases, sites simply don’t enforce adequate password requirements to make passwords secure, to the degree that they can be made so.

Maybe a shall do more crypto-party instead of send our passwords online, giving our phone numbers or biometrics.