A password/security question can leak, and FAR more easily than your fingerprint, which requires your PHYSICAL presence. You choose to use a device implementing TouchID? Deal with it.
You seem to know NOT A LOT about this, because if you did, you wouldn't be giving these erroneous replies. You are using a platform DESIGNED BY APPLE - you are using their software UNDER LICENCE - you don't get to tell Apple how to run THEIR SECURITY MODEL, you merely own the PHYSICAL HARDWARE, not the way security is implemented, using it. If don't like VERY tight security, maybe you enjoy risking YOUR information, so, call Apple and ask them to design a PERSONALISED iPhone with special security holes which allow knock-off secure chain part swaps, then get back to us and tell us how it went.