Who exactly would have my phone for a few hours to even try ? Police aren't gonna go to that extreme, but criminals might.
I don't need your phone until the moment I've made a fake print. I could spend days or weeks ahead of time making sure I got a good print of the correct finger. But few would target someone like that unless the purpose was some kind of intelligence grab. Or an angry spouse
Secure enough.....
Yep, I've pointed out many times that while easily fooled with a good fake print, TouchId is "secure enough" for the majority of people and their situations.