Thomas Brewster commissioned a £300 (roughly $380 USD) 3D-printed copy of his own head:
For our tests, we used my own real-life head to register for
facial recognition across five phones. An iPhone X and four
Android devices: an LG G7 ThinQ, a Samsung S9, a Samsung Note 8
and a OnePlus 6. I then held up my fake head to the devices to see
if the device would unlock. For all four Android phones, the spoof
face was able to open the phone, though with differing degrees of
ease. The iPhone X was the only one to never be fooled.
Apple doesn’t get enough credit for how good Face ID is (and how good Touch ID has always been).