How bad is this?
I should add that on the list of countries where you'd generally be okay with randoms or governments having your face scan, this one is, if not directly the bottom one, very close to it.
But then again... what harm is there? So somebody has my facial scan for Face ID... what of it?
Should my convenience trump security in this case?
If somebody has a cheap bullet camera that they bought from Amcrest for $50 they can watch your comings and goings and if they put a tag on a picture of you they can use facial recognition to find other times you walked by the camera. That's the problem w/ facial recognition, it can be applied to people without their consent.
Giving consent for one useful use doesn't change that reality in one direction or another.