The last one at least wouldn't apply. Only pictures the phone takes would be blocked. Assuming this is some sort of OS/Administrative app, I doubt the vault apps could get around anything preventing the camera service from returning an image without, basically, rooting the phone. Other than that, the facial recognition stuff is a fair point.