Of course it's secure. We had the top government men in the other day to make sure it was!

The fingerprint is kept locally only. Presumably when it uses it to authenticate a purchase it's actually validating locally and sending up your password (or other auth token) rather than sending the biometrics directly.

Yes, exactly - the said men from the government assured us this was so. :)