Better solution - central trust via apple face recognition (federated, private), but used by others as login.