@capitainesam

I would say you do the exact same thing:

If you used to use biometric for access control and your biometric is "leaked"…
You remove the biometric login and setup something else (password, certificate, passkey… just something else)