You actually shouldn't use your face or thumb to unlock your phone. Here's why