If these systems ever become good enough to be useful, the privacy and consent questions need to be treated as core engineering requirements, not as a policy afterthought