Sadly, that government body pays private companies (palantier, cough cough) on the back end. They combine the data with a gazillion other datasets paid for by taxpayers. Since this is what they call "model training" you can't unring that bell from that point on. Immutable data on an evil corporation's dataset, for as long as data can be stored.

Oh for sure I just wouldn't want anyone having my face scan personally. I'd love to have a law passed that designated biometric data as personal property requiring a warrant or explicit consent to collect.

I would posit that the government is even worse for handling this data. See recent FBI hack and not as recent OPM hack.