HopalongPetrovski
I'm Spartacus!
The problem these days is that we've all been conditioned through social media to just surrender our privacy and if you actually want to do/participate in almost anything you just have to give it up. Almost everyone wants your primary ID docs to set up virtually anything and in reality it's actually for the purpose of expanding their holy databases, cause thats the new currency.A key only ever defeats an ”honest thief”. So thinking the dishonest ones will already be able to defeat ALL locks, a system that uses something I will never forget to carry (as in my face) would be just fine for me.
But I do take your valid point into consideration.
For bank accounts etc, two-factor authentication should always be used.
A Bluetooth connection to your phone could easily be incorporated into a smart house lock to provide a secondary authentication without need to be connected to the cloud.
The trouble with data hacks, as seen with Optus and Medibank, is that the lazy IT team store this data unencrypted. And that should be completely illegal!! Passwords should NEVER be stored as plain text. Only the HASH of it should be stored, and then only in a way that it is not reversible. I know this from 30 years experience in computing and R&D. These bloody lazy organisations should know better, and protect the data they store about us much better than they currently do.
An unconnected lock storing metadata describing my face only within itself, and Bluetooth synched to my phone, is impossible to remotely hack. I’m happy with that.
Then, as you say, they don't protect it properly and we wind up in the shit.
Akida protected local ID devices can't come quick enough.