The whole promise of the new rules is that your face is never really seen, only measured, and that those measurements vanish. Anyone who has watched medical images or genetic data leak into places they never belonged will hear that promise and ask, compared to what audit, compared to what breach? Twitch may say the scan sits on your phone and only an age estimate escapes, but the more platforms normalise this trick, the more tempting it becomes for someone to keep a copy, correlate it, and sell the pattern. The law may be written for twenty twenty five, yet the data, once spilled, will live far longer than any of us.