According to Microsoft Windows Hello is a "more personal, more secure way to get instant access to your Windows 10 devices using a PIN, facial recognition, or fingerprint". Wouldn't it be cool to use it to authenticate sudo via face recognition, fingerprint authentication, or a machine-local PIN? Luckily there's a PAM module that does exactly that and it is working perfectly for me so far.
To install the PAM module, you need to download the latest release and install it via the install.sh script that comes with the package. After that. log out of WSL2 and log in again to activate the PAM module.