So I'll just have to take your phone from you, unlock it with your face and empty your wallet with your palm.

It's the best $0, no-wrench attack I can think of while you pretend the palm scan human QR analogy is somehow an innovation 😉