Its not restrictions that is the issue but the attempt to normalize handing out ID and face scans. It would have been more acceptable for them to flat out disallow restricted content than moving towards normalizing this type of entrustment of sensitive data.