I might consider the facial verification thing if someone fulfills a security audit that both verifies the photo is never sent, encrypted or not, and it does not stay on the device’s drive.

But yeah, part of me hopes some number of privacy focused companies will just abandon business in these locations and claim “It’s only a matter of time before they reverse course for security failures, we will just wait until then.”