A four digit code is harder to break than holding up a photo of someone. I'll guarantee the very first day facial recognition will be "hacked" with a photo. I'm sure Apple will claim to have some sort of 3D recognition in the camera to "prevent" that, but it will be bypassed with lightning speed.This was a common sense conclusion.
Traditional contactless credit cards already worked without any authentication.
Apple Pay currently works with an insecure 4 digit passcode.
Why would Apple Pay not work with enhanced facial recognition? Banks should be lining up to agree to Face ID.