I feel like a short password is a much bigger security risk.

There are ways to disable the fingerprint scan in the moment. Different phones have different norms around this, but one universal option: pick a finger to not code into your phone. When a cop asks you to unlock your phone, say okay, use that finger five times in a row, oh no, you’re locked out, man, this fingerprint reader sure is finnicky, oh well!