biometrics is only required for accessing the passkey.

PIN or biometric for signing a transaction is a wallet level decision. You can set this up in Cove to require it right now.