For the sake of argument, we’ve caught the bad guy. What should we do now? I think this is a seriously hard to answer question, and we haven’t really got a coherent answer.
This assumes that we actually get the right person as well, and facial recognition is honestly really bad about getting people caught in the dragnet. If we have an attitude where “computer says no” means you’re now subjected to criminal penalties, that’s a nasty world.