@GossiTheDog Looks like your original note that requiring biometrics to set up but not on subsequent access seemed really squirmy has, indeed, proven to be really squirmy.
It's hard to imagine how they could ever get the actual 'recall' function of recall up to a safe level without measures that totally rule it out as a consumer feature. The sort of faff involved with HSMs, Data rooms, or SCIFs isn't going to fly; but it's unclear whether anything more convenient is fit for purpose.