There are some protections against exactly this.

If its been more than 48hrs since you last unlocked the phone or you turned off the phone, it will require your password again.

You can also discretely disable Face ID by holding down power and a volume button.

I am curious if android has the ability to quickly disable fingerprint unlock if you are in adversarial situation. So it only asks for passcode.

If you reboot the phone then it’ll only accept the PIN to unlock, at least on newer versions.

Or just use the wrong finger a couple of times.