Since there are so many security holes in web browsers, servers and operating systems, using biometrics to secure online transactions looks like overkill.
The point is that just because biometrics can be used to make systems extremely secure does not mean that the technology always has to be deployed in that way.