When it's allegedly stored in the Secure Enclave and the data unable to leave the device, it is obviously not the same interaction. I personally would be fine with a law making that distinction with the on-device recognition as legal.