With regards to your first suggestion I think you are overly complicating things. Simply forcing users to utilize two-factor authentication will minimize their account sharing attempts.
Checkout https://moodle.org/plugins/auth_a2fa
General developer forum
Biometric Login
This discussion has been locked so you can no longer reply to it.