I think they want selfies to enforce a one-account-per-person policy, to limit scraping. They already enforce phone verification, but there's plenty of ways around that (e.g. services that redirect verification SMS from hacked phones, or just buy phone-verified accounts from someone else). Facial recognition raises the bar and gives them extra confidence that two accounts are unrelated even if they have similar IPs/access patterns/whatever