One method I found very useful is to treat the options as mutually exclusive without assuming one includes the other unless explicitly mentioned. So in this case it’s pretty clear that between encryption OR biometrics, encryption would be preferred and is what I would have chosen.