This exploit isn’t practical as it requires 3D scanning the victim’s face. Similarly the touchID exploit isn’t practical so no one cares.

This method is much more secure than passwords that also get exploited by cameras or just brute forcing the 20% of pass codes that are “00000.”

When bouncers let people enter a bar with a photo ID that does not match the person in question they are not failing to identify a human. They are failing to give enough of a shit to carefully examine the picture in question.