Apple says its facial-recognition data is stored in a secure, separate area of the device.
There is no way to do this only using one finger, but iOS 11 has fixed that. After you erase your content, Find My iPhone and Activation Lock are also switched off.