With GrapheneOS you can enable the setting that requires you to use biometric identification to get to the passcode screen, which means you're always protected by both.