Ah, it was a timely story that broke.
On the feeling of observation - Charles Stross wrote a very intriguing essay on the 'Panopticon Singularity' after the Snowden breath and while it is a hymn to privacy(and no worse for it) it raises very interesting and relevant points. TL;DR- It goes back to the idea that the Victorians had that being watched, or thought that you were being watched was morally improving.
A lot of problems with biometrics come down to sampling and flat images of fingerprints, faces etc. about ten years ago someone asked me to find a solution that could continuously authenticate someone based on typing - turned out timing fro flight time and dwell time on keys could do this, but only for passwords and there was a training time, now I think it's fair to say decent learner/enough compute you could.
If the old facial recognition is like a 2D fotofit seen over TV for five seconds, the new approach of 3D mapping(with LazorS! maybe even crainial mounted on sharks) has the potential to be more like a satellite scanning and astroid - much more sampling options so much more power, and some of the challenges with more simple biometrics go away/become less of a concern. Attackers will still adapt, but use factors in combination and select them unpredictably to reduce resitance.
On privacy, yeah it's very important, but rights are balanced with responsibilities.
If we take the device vendors as three examples I kind of trust Apple to not sell me because they overcharge me anyway for shiny under specced things, Google I'm pretty sure will sell me so I don't use Android at all but I'm not so committed to my privacy that I will tolerate poor search results. Microsoft would sell me I think if it knew how, but I've come to expect them to not get the product right at first, so I figure I have time till they monetize linked in, and they can't do phones or tablets(we all know it's still a laptop).
Now if your device knows who you are and then the website/service you post on needs to AuthentorizeMeTM, maybe because of the reach/policy then it could ask your device vendor if you could be worked back to if there was a complaint and then let you. Or maybe today is your yearly hate speech day, and the service detects you and then gets your ID because of this.
Now geopolitically, from society standpoint can you get even to agree? No way, and probably should for most activity but you can limit peoples ability to post to prime services without these kinds of controls around attribution, and that might be a good thing in balance.
