My Nexus 5X highly recommends to set up pattern lock in addition to fingerprint lock, and the pattern is asked upon every reboot. And my password manager (KP2A) recommends to use fingerprint unlock only to "quick unlock" after a short period of inactivity, but to require full password for the DB after every reboot.
Hence two questions:
Why does Google considers the fingerprint lock as less secure than pattern lock?
Using your fingerprint to unlock your device may be less secure than a strong password, PIN, or pattern.
For my password manager on Android, is it really much safer to re-enter password upon every reboot rather than to use fingerprint lock? How many bits my password should have to be more secure than fingerprint lock?
Please note that I'm asking specifically on fingerprint scanner implementation in 5X, not for a general theory on an average abstract fingerprint scanner solution.