Or they could use the self-checkout at Walmart, or walk through a Target, or buy a hammer at Home Depot. The government buys data from a wide variety of sources, without warrants or other oversight. Yours too.
https://topclassactions.com/lawsuit-settlements/privacy/bipa...
https://www.findlaw.com/legalblogs/courtside/lawsuit-claims-...
https://www.homedepot.com/privacy/privacy-and-security-state...
From the Home Depot link:
"Biometric Information What Information Does This Include?
Facial recognition. Where Do We Collect It From?
Via cameras at select stores, in parking lots, and at other facilities as permitted under applicable laws.
Why Do We Collect and Disclose It? Fraud prevention, security, and asset protection.
Who Do We Disclose It To? Service providers that process information on our behalf, such as security and fraud prevention services.
Law enforcement, public and government authorities, and other entities as we deem reasonably necessary to comply with law, support investigations, and protect the rights and property of you, us, and others.
Any successor to all or part of our business.
Advisors and consultants.
Our affiliates and subsidiaries."