I'm no expert, but I was under the impression that their tools use not only facial recognition that can (with a non-perfect record) identify people wearing nose and below masks, but also identifies based on cell phone and geographic data. So if someone plans on relying on beating facial recognition, they'll need to also beat the other tools in use by wearing a full mask, not carry a cell phone, etc.