To me giving a company or government permission to create the databases allowed for mass facial recognition is the same thing as giving the facial recognition data to criminals. It will be leaked/hacked/sold, etc. It is only a matter of time.

How many Social security numbers in the U.S. have been leaked/hacked/sold/illegally transferred? ~340 million.

Facial recognition will be a near useless tool for security in 10 years, and 100% for population monitoring at the rate we are going.