Biometrics Aren't Just For Logging On

from here

This guy's OpSec is really all over the place. What is the threat model he's using to decide how to protect himself?