Twice now I’ve gone through the process of setting up an Android device in the last week. Both times when it gets to the finger print setup I’ve hit the skip button and it continues on without any further security setup. Wouldn’t it make sense to ask about a password or pin after that rather than assume the user doesn’t want security?