Biometrics Are Worse Than Passwords