[autoexec]

> but we’re talking about something with essentially no consequences here.

Just because it's difficult to identify the harms caused by someone stealing your biometric data that doesn't mean there are no harms. Gaining access to someone's biometric data clearly opens them up to certain types of risks ranging from identify theft to surveillance. Fraudulently gaining access to someone's biometric data is wrong even if the data is never abused or exploited.