And in all likelihood forcing your fingerprint or face unlock is perfectly legally acceptable for them to do. A password or a code is something they’d have to force you to say and ultimately you can choose not to (though they’re still fine to just try and hack out a pin/pattern on their own, or use phone-cracking tools or backdoors) but you have no defense whatsoever against your biometrics being used.