I tend to do that when I can. I am just so glad I have FaceID on iPhone as now all my secure apps such as banking now need biometric to authenticate and even approve bank payments, card charges and so on (other than Apple Pay). I suppose I could PIN this but less inclined to do that as it could be coerced (in some nightmare scenario).An option no one has brought up yet, you could just turn it off. We used Macs for decades without any biometrics. My password for my Mac is used nowhere else, is a random string, and I can type it faster than reaching for touchID and letting it register. I really don’t know if touchID actually adds anything but complexity no one asks for.
10-15 years ago I used and sold to clients RSA authenticators mainly for Remote Desktop via Citrix. This always worked very well and struck me as being a simple balance between security and convenience. For many clients while not flawless it was better than the useless passwords they would choose. The devices could easily be managed, assigned, disabled and so on. With a secure desktop on Citrix from hosted server it was decent. Worked very well with thin clients too which was handy. Some sort of physical authenticator would be great (why is there not an Apple Watch or iPhone app for this?).
I have looked at YubiKey numerous times and like the principle of it. I used it on Windows during trial to handle authentication. With USB keyboard that had a USB socket it was very handy to plug in and leave in then remove when I left desk. Desktop would unlock when plugged in and lock when removed. Must look into it again on macOS.