According to the article, the phone won't unlock if you aren't attentive, i.e., looking at the phone with your eyes open with tiny imperceptible eye movements.
Not looking forward to the video services that demand that you pay attention to ads before they let you view their content, now that they have the ability to check.
Do they actually have that ability, though? There's a big difference between "the authentication mechanism has access to this API when you're authenticating" and "everything always has access to this API at all times". I haven't seen any indication that this will be generally available on-demand to applications, and Apple's track record on this stuff isn't terrible (largely because Apple isn't existentially dependent on advertising like some other vendors of mobile tech).
The camera and the sensors can be available but I'm certain the auth mechanism itself won't be accessible. AFAIK they have a dedicated chip for this like Touch ID and what software can is limited.
