First of all, the iCloud breach you're referring to was not Apple's fault, that was the fault of foolish celebrities not using a secure password or two-factor authentication and clever social engineering. It did, however, prompt Apple to push two-factor authentication.
Second, biometric data, such as your fingerprint and face scan, are not stored in any recognizable manner on the device, nor are they sent to Apple or to any other third party. The data is stored in the secure enclave as an undecipherable hash which cannot be reverse reconstructed. When you unlock your device with these methods, a hash is created instantly and then compared to the stored hash in the secure enclave.
The ignorance is astonishing.
Say what you want about Apple, but when it comes to user privacy, they're damn good on the front lines.