Biometric locks like face recognition are easy to set up—but thanks to a legal loophole, they're easier for law enforcement to bypass than a passcode.