I don't see any suggestion that this is what they did in the demonstration. In fact, quite the opposite is suggested: "Q: Were you able to use the mask to unlo

I don't see any suggestion that this is what they did in the demonstration. In fact, quite the opposite is suggested: "Q: Were you able to use the mask to unlock the iPhone immediately after freshly enrolling the real face? The reason I ask is that, according to Apple's whitepaper, Face ID will take additional captures over time and augment its enrolled Face ID data with the newly calculated mathematical representation. Can you describe precisely how you went about conducting this experiment? A: It does not matter whether Apple Face ID "learns" new images of the face, since it will not affect the truth that Apple Face ID is not an effective security measure. However, we knew about this "learning", thus, to give a more persuasive result, we applied the strict rule of "absolutely no passcode" when crafting the mask."