I appreciate the response, but it seems that database can be constructed with or without facial recognition because photo ID is already required. So, I ask again, why is this bad?

Showing ID to pass a gate is somewhat different than having a timestamped record of the fact that you passed a gate, but I agree that given it's already surveilled it's not a big difference. Still, small differences add up.