My country lets me use Google's SSO (arguably should probably also support Apple and have better 2FA options) - why wouldn't yours?

If someone wants to use facial recognition - why not? If someone wants to use insecure username/password and risk a compromise - let them do it.

FWIW big tech has probably 99.99% of people's faces, I'd guess at least 90% is tied to an identity.