"Flag you" as what? It doesn't need to completely "fool" the system & make it believe there is no face. It simply has to get the system to believe that "makeup style A" and "makeup style B" applied to the same face are, in fact, two different faces. This is a pretty low bar, and one which I suspect will be achievable for quite some time.