What this really shows is how brittle a lot of facial recognition systems are once the input stops looking like the clean training set. It does not take some magical anti-AI trick. A small shift in landmark geometry, contrast, or occlusion is often enough to push confidence off a cliff.

The hard part is not recognizing a well-lit passport-style face. The hard part is deciding how the system should fail when the real world gets messy or adversarial. If the fallback is bad, you either lock out legitimate users or quietly accept weak matches.

That is why I think the useful benchmark is not top-line accuracy. It is how gracefully the system handles weird, low-confidence, real-world inputs.