After one security breach, we definitely have the ability to change our PIN, the code our access or even some verification questions we have asked. But we can not change our face. Imagine one intruder to steal the biometrics of one user and use them for illegal activities.

The providers of the biometric sector know that they are very protective sensitive information, so they should be very careful so that this does not happen.
The Ministry of Homeland Security of USA, has recently come into conflict with biometric data providers, who are supposed to be good at data protection, perhaps better than most site vendors.
However, despite what they claim, we know that the safety it can never be given or absolute.
And a security file that includes a user's face will also include a number of other sensitive information. You do not need to enrich this data to look convincing. This is one of the reasons why medical records have become such a common target for them hackers.
Face recognition technology is definitely in development. THE China has experimented extensively with it, using machine learning, and many other countries have entered into this game.

Singapore, for example, applies a national identity based on the face of its citizens.
Of course with our constant exposure to SOCIAL MEDIA one could say that it is not so terrible to move our face.
But if a user's biometric data, including his face, can be used to interact digitally with a growing number of businesses and organizations, it can actually ruin his real life.
For example, one could steal this information, use it for one scam or for others malicious actions and appear to have been carried out by the person from whom the information was stolen.
For the above reasons the safety of biometrics is particularly important and should be taken seriously by providers.
Fortunately, I have a face so ugly that not even my phone recognizes me