Face ID is entirely on device and it is cryptographically difficult to extract the data even with a jailbroken device.

Well, hopefully this is indeed the case!

i mean so they say? but really?