For now, at least.

Some companies have massive annotated databases of people's faces from different angles, and the ability to do plausible 3D reconstruction of the faces.

Yes, like some DMV's do facial scanning now, and some cities/counties are hooking it up to Amazons Rekognition with cameras mounted in public as well as Palintir software, among others. The FBI tends to use those DB's too. I'll stick to my password, which is actually constitutionally protected, unlike a face, which can be seen from public.

Yep. My employer has several hundred thousand laser scans of real people, spanning every age, gender and ethnicity on the planet, multiple times over. Our FR system can perform 24 million high quality 3D reconstructions per second with two cores at 3.4 GHz. It's pretty amazing.