This is satire I presume from the jokiness of the whole thing, but being able to purchase a token in person by just showing an ID (without any storage of data) would be a less intrusive method then the “have your ID and/or face collected and stored for an undisclosed period of time” approach.