I feel like the bigger security concern here, if one needs to worry about it for their threat level that is more likely, is just like if someone knows your password, who could force me to unlock my phone via biometrics?

This was the majority of my experience as well. As a newer programmer, I’m more than happy to always know a better option. But if the way I’m looking to solve my problem is wrong, don’t just give me Y, explain to me why it may not work how I think it will. Tell me about X and some pitfalls or reasoning for it not going to work, then recommend Y. Because if others only see the Y answer to my question about X, they’ll probably just keep searching for a solution to X not knowing it may not work like I didn’t know.