A team proposes biometric login as the only recovery method for a critical service. What should be evaluated?

1. Only the product's convenience claims
2. Only whether competitors use it
3. Security, accessibility, recovery, privacy, and business-continuity implications
4. A guarantee that biometrics never fail