[Feature]: Implement PIN Protection about monal HOT 2 OPEN

Would #992 be okay, too? It just swaps "pin" for "face recognition".

from monal.

No

1. Anonymity and Privacy:

• PINs: A PIN is a simple numeric or alphanumeric code that is not tied to any personal identity information. It does not reveal any personal details about the user.
• Face ID: In contrast, Face ID involves the use of biometric data which is inherently personal. Facial recognition data can potentially be used to track or identify individuals without their consent in various contexts outside of device security.

2. Data Sensitivity and Abuse Potential:

• PINs: If compromised, a PIN can be changed easily and does not inherently expose any personal biometric information that could be abused in other contexts.
• Face ID: Biometric data like facial recognition is immutable. If such data is stolen or improperly accessed, it cannot be altered to safeguard the individual’s identity, posing a higher risk of identity theft and unauthorized use.

3. Security Through Obscurity and User Control:

• PINs: Users can choose the complexity of their PIN and change it frequently to enhance security. The effectiveness of a PIN depends on it being kept secret but it can be regularly updated to maintain security.
• Face ID: While generally secure, the use of biometric data means users have less control over this aspect of their security. Once compromised, the user cannot simply change their facial features to secure their device or accounts again.

While Face ID and similar biometric systems offer convenience and can provide robust security features, PINs offer a more private, controllable, and less invasive option. The use of a PIN avoids the complexities and potential dangers associated with the handling and protection of biometric data, making it a preferable choice from a data privacy and security perspective.

from monal.