First adversary to "crack the code", will then use the photo selfie system to defraud everyone. And then government will most likely come after the persons stolen identity for compensation.

You could deepfake someone in realtime using publicly available photos. I don't know what the answer is, but photo biometrics sounds like a, "this can't possibly be hacked because I wouldn't know how to hack it scenario". Like when a naive person takes a jumble of shift, xor, and, to create a random number generator and then it turns out it has a cycle of 1024.