Meta Quest Pro falls short on biometric protections