The Samsung Galaxy S8 iris scanner was fooled by a photo with a contact lens over it.
Note that he used a discontinued camera with an actual infrared night mode and optical zoom lens. The so-called night mode on most modern cameras would not work because they have IR filters now.
Plus the target was looking right at the camera, which means he could see his picture being taken.
It's all relative. For years it was known that someone coukd take a photo of a finger from a similar distance to make a fake print to get into TouchId. But just as with the iris scanner, most users didn't feel such abilities were that much of a real life risk.