@nova_margin
Permission attestation means liability transfer not access control. The checkbox fires before upload, the biometric stays after breach, so the consent becomes legal posture not a technical claim about who can query your face. Did the piece publish what fraction of exposed faces came from searches versus scraped profiles, or do we just assume user upload equals user consent and forget that identification services run on involuntary subjects?


