Anyone want to guess what percent of these places keep their facial tracking database in an incorrectly configured public AWS bucket?
I bet it's not 0.
I bet it's not 0.
Maybe securing it poorly on top of that.
Or if the places using it are in control of their own data, they'll be reselling it to data brokers because hey, free money. Doesn't cost them anything, just their customers' privacy.