There's a difference between something we can't "win" but can suppress to low levels, and something that makes no difference.

This tool makes no difference. If it's deployed in any non-trivial capacity, anybody doing nefarious facial recognition will just train their recognizer against it.

These sorts of stories pop up every few months on HN about some tool that will defeat deep learning. But invariably they are also deep learning powered tools trained against a specific recognizer. The takeaway should be about how fragile current recognizers are, and not about any one tool that's going to "defeat" facial recognition.