Exactly. They've done it in the past, and it cost them $650M. It's unclear whether that was enough of a deterrent to change their behavior. [0]

  [0]: https://www.rgrdlaw.com/cases-in-re-facebook-biometric-info-privacy-litig.html

$650M to Meta is a drop in the bucket.