How private can Face ID really be?