Irony of the issue is that its not faulty for one time. Once my brother unlocked my iPhone using the passcode( which I provided to him ), thereafter my phone doesn't need to be unlocked by him using the passcode instead it gets opened by Face ID (i.e., without entering the passcode ). This keeps happening doesn't matter how many times I reset the settings or reset the iPhone. So after resetting, I registered my Face ID and then asked my brother to check if the issue has solved.
So the phone didn't unlock using Face ID and asked for passcode which is what it should do. Once my brother entered the passcode, iPhone got unlocked, surfed the phone for few minutes, he locked the phone, now when he tried to unlock it got unlocked using his face.
Then happens every time. Try to solve this ASAP. I believe its a glitch.
As you say it happens 1 in 1,000,000 with a single enrolled appearance, if this happens to 2 in 2,000,000 and so on, this appearance may increase and I don't think your consumers will be happy.