After testing 110 smartphones, the Dutch Consumentenbond not-for-profit organization concluded that the face unlock feature in 42 of them can be circumvented using a high-quality portrait photo of the owner. 38% of all the devices they tested would allow malicious third parties to immediately unlock phones that only use facial recognition as a locking mechanism and to gain access to all the data contained within, from photos to sensitive banking and personal data. Samsung’s Galaxy S9, S9’s Mate 9, Huawei’s Mate 20 and Note 20 Pro, as well as Apple’s iPhone XS, XS Max and XR are some of the phones that did not fall for the photo unlocking trick.
Source: https://www.bleepingcomputer.com/news/security/face-unlock-feature-is-useless-in-4-out-of-10-phones/