Fingerprints can easily be acquired, if that weren't the case they wouldn't be extensively used in crime scene investigation. When fingerprints were supposed to be used as authentication, together with an ID card, in Germany, the German Chaos Computer Club acquired the fingerprint of the minister of the interior from a used glass and spoofed a reader with it by transfering the print to some adhesive tape.
I think what op means is that if you find someone's password, you can type it into their device and you are in. Total breaking in time < 30s. If you find someone's fingerprint, you need to make a copy of it, scan it at high resolution, prepare a good printout and only then you can use it. Total breaking in time >1h.
