Biometric locks like face recognition are convenient to set up—but because of a legal loophole, law enforcement can bypass them more easily than a traditional passcode.