On macOS Sonoma and newer, you can enable Touch ID for sudo with a local PAM file that survives system updates.