The work I'm thinking about (revocable biotokens) is a bit like a hash, so Facelesscorp never gets access to your raw biometric. The only thing Facelesscorp can

The work I'm thinking about (revocable biotokens) is a bit like a hash, so Facelesscorp never gets access to your raw biometric. The only thing Facelesscorp can see is an opaque blob that they can only use to verify a cooperative subject's identity; it's not useful for anything else.