> But I know the facial recognition database is a huge privacy liability, so it will never happen.

That's fairly easily overcome—you just need to have a local facial recognition database, specific to your contacts, rather than querying some centralized one.