I agree with you that a biometric system might be better and more convenient in some cases, but GCHS was (and probably is) using it to protect financial and possibly other data. They were using scanners that plugged straight into a computer, communicated the fingerprint over their network, and then a server verified it. To many places for a man or program to get in the middle.

And who knows how that data was protected where it was stored.