If it’s compromised you can’t change it for one

Also you can’t be legally forced without a warrant to give a password but biometric data you can be legally forced without a warrant to give up