A chain is only as strong as its weakest link, and having both Face ID and Touch ID simply means that your phone is only as secure as the least secure means of authentication (which is Touch ID in this case).
That's just not the way Apple operates, and this is what sets Apple apart from the rest of the competition. A company like Samsung just crams a veritable array of unlock methods into their phone, all of them with their share of shortcomings. Pattern unlock is easy to crack, fingerprint sensor is in an awkward location, and iris scanner is easy to fool. It's really feature bloat for the sake of ticking off a checklist. At the end of the day, your phone isn't necessarily more secure despite having 5 different unlocking options to choose from.
Meanwhile, Apple spares no expense at perfecting Face ID so it can serve as a viable upgrade to Touch ID. Sure, you have one, but it will be the best one Apple can offer. When the iPhone X is released, I think it's going to be clear just how superior Face ID is to Samsung's iris scanner technology. And I am excited to see how facial recognition plays into other Apple technologies, such as health tracking.
That is courage. That is Apple.
Apple can keep their "courage". In their language, it is directly associated with removal.
Apple had the courage to destroy everything that attracted me to their platform: from the Mac Pro, to sealing up machines, to not being able to revert software versions that came with my device, to soldering RAM and SSDs (!) on ALL portables, to requiring dongles for EVERY.DAMN.THING.
I hope companies like Samsung continue to have real courage, continue to think different, and continue go against the "remove, Remove, REMOVE" trend that has taken Apple over. I for one welcome the "everything but the kitchen sink" approach. My Note8 is the most kickass smartphone I've ever used, and its combination of features is second to NONE, all in a sexy, attractive package and ZERO compromises (yes it has a headphone jack). Sammy has turned me into a Note fanboy with this device. If it had a removable battery, it'd be perfect.
What you call "bloat" here, I call "choice" and "freedom". Realistically speaking, if someone wants to get into your device, they will. The only real secure option is a complex password stored in your mind. Everything else is for convenience's sake. And FaceID is no more convenient than anything else out there.
All that said, FaceID is impressive on paper and it IS evidence of Apple innovation, despite the epic fail on the Keynote which shows it's limitations. It is exciting to think where the tech could be going, although I'll be happy for other companies to follow Apple here and maybe even teach them a thing or two, so long as it is not at the expense of choice, like it always is for Apple.