But can it be fooled by holding a picture of the account holder ? The internet is full with our faces, somebody just needs to download 1 picture and maybe they can access our data.