Thanks, yes it's almost like a cult thing - you're supposed to stab and poke and just _discover_ the hidden features.
One example to prove your point was that I needed to disable/restrict the fingerprint auth as he was using that to get himself more time; his old device that died didn't have one.
Everything said yeah just go to "Face ID & Passcode" under settings. Except it wasn't there. An inordinate amount of effort later I learned there was a setting knee deep in Screen Time > Content & Privacy Restrictions that would allow it to be displayed.
Why TF not just display the Touch settings tab still and then a message saying its use is disabled in that part of their jungle hell? I mean that'd actually be user friendly.
(Setting up Docker in WSL2 is a breeze compared to the guesswork that's becoming their new norm.)