8 points
Better: restart the phone. This puts it into the safest state it has, as it has not yet been initially unlocked and will require a non-bio auth. Stronger security, may/should hold if they attempt to attack/hack/compromise it, if it comes to that. Takes like 3 seconds. Do it, not the equal-time-worse-security version of just disabling bio.
