There has long (always?) been the ability to make an emergency call when locked, but there has never (intentionally) been the ability to “open sesame“ access i to a device and bypass Face ID or Touch ID or the passcode or password.
Face ID and Touch ID errors, and device restarts, and five quick presses of the side button, and certain other cases, will revert to requiring the underlying passcode or password.
Details on when FaceID and Touch ID will revert to passcode are here:
I’d here assume either a particular button press or several biometrics failures triggered the passcode or password prompt reported.