Comment by wolfium3

Terrible idea. Any form of biometrics are effectively passwords that can not be changed/rotated. If the data is compromised/leaked even once, it's useless.

Edit: That said, one of the other commented this: "Eyeballs are usernames not passwords". I think that's ok-ish...