I'm not very surprised. I think even old-school face recognition does things like measure distance between your eyes, nose etc, and stuff like that (your skull) doesn't change a lot during 10 years of adulthood. The real danger is that they connect all of that information. And as you said, it's everywhere these days, they have a lot of sources and -of course- it's in the wrong hands.