Re: I Don't Get It...
They need to access the "secure enclave" on your device to sign the nonce, and to unlock that enclave they will need your PIN or biometric etc. so be careful that when a person steals your phone they don't also take your finger.