Its 'something you know' vs 'something you are'.

In some sense, the issue here is that we use fingerprints as authorization whilst they should be authentication.