I could see this being privacy friendly if the user could see exactly what Google was using.

For instance, terminalcam, gives just enough data to reveal liveness without necessarily giving enough information about identity.

https://gitlab.com/here_forawhile/terminalcam