I've been trying to think about this 'differently' for a while and think I've come up with an apple like solution that explains the lack of Touch ID and how they will help make face ID secure and it's so incredibly simple.
First and foremost, Touch ID was never meant to be destined for this phone. Touch ID was the back up incase Face ID wasn't ready. The position irrelevant
Secondly for security, it's simple. It will just always be scanning for your face. Doesn't detect your face, the phone locks. Like Touch ID, you'll be able to set up multiple faces so if you want your partner to have access to your phone, when you pass it, scans their faces recognises it so the browsing experience continues - all automatically.
Regarding payments, only the first that was registered can process a payment
First and foremost, Touch ID was never meant to be destined for this phone. Touch ID was the back up incase Face ID wasn't ready. The position irrelevant
Secondly for security, it's simple. It will just always be scanning for your face. Doesn't detect your face, the phone locks. Like Touch ID, you'll be able to set up multiple faces so if you want your partner to have access to your phone, when you pass it, scans their faces recognises it so the browsing experience continues - all automatically.
Regarding payments, only the first that was registered can process a payment