points
and remember its like ratchet. there might be 99% of services that use inhouse face id, and its enough to have only one to leak your data.
My data point is persona.