"There's a 50% chance that two people in this room have the same face" is not the same as "there's a 50% someone in this room has the same face as mine". The birthday paradox isn't really useful for conceptualizing FaceID's security.