Biometric data theft is a critical risk. Unlike replacing a stolen credit card, compromised palm data cannot be reset.