> Who cares? There's no risk they are going to sell it or try to make some dirty money using it in other ways.

What makes you think that? All the big telecom companies make "dirty money" by processing the millions of warrantless wiretap and information requests. Facebook probably already does too, it's not much of a difference between that and utilizing a face database.