Kind of confused why Rekognition continues to be made into the 'bad guy' here. Even if stronger protections are rolled out for this it's become far too easy to make these types of systems to do a great job of keeping them at bay at this point. Most people with programming experience could roll out a reasonably accurate facial comparison/recognition model like Rekognition and deploy it to a Raspberry Pi without expelling too much effort. There are many open datasets for it
EDIT: fixed a spelling error