1. For now they do collect biometrics with opt-in, because it's valuable data for refining the ability to scan only irises and determine if they're legitimate

2. I can see this being a good idea

3. They don't