Point is, that before touch ID very few people locked there phones. Even the then normal 4 digit pins where not used. Then came touch ID and people locked there phones because it was so convenient. The pass codes could be made secure because you only needed it every few weeks. Face ID made it even easier, its working very well.
Now we have the mask situation. Sure, you can use your passcode, in my case a combination of numbers, letters and symbols 12 digits long. By the time you authorized a payment the screen gave up. That is NOT a solution. Neither is to dial security down and use a simple pin again. Besides, my company would not allow it.