The iOS 27.2 selfie check is fine. Putting the gate in the OS is the problem

Is a privacy-friendly face scan still a good idea if it can be switched on by someone else's law? That is the question iOS 27.2 leaves hanging, and we have yet to see a public answer from Apple.

The facts first. Apple's update added a selfie-based age verification option, which, as MacRumors reports, lets users in supported regions show they are adults without submitting a credit card or government-issued ID. Coverage describes a four-angle head-movement selfie, processed on-device and through Apple's Private Cloud Compute, with the image deleted right after adulthood is confirmed. The detail that matters most for us comes from Tech Times: the gate sits at the OS level rather than inside individual apps, which the outlet says sets it apart from earlier age-verification rollouts and which, in its reading, Apple's public documentation downplays.

The feature is good. The location is the story

On its own terms, we like this. Handing a credit card or an ID scan to every service that wants proof of adulthood is a worse deal than a selfie that is checked and discarded. If the claims about immediate deletion and no ID hold up, this is arguably the least invasive option on the menu.

But "least invasive" describes the implementation today, not the capability. An app-level check is something each company builds, each regulator has to chase, and each user can refuse by skipping that app. A check inside the operating system is a single switch across every iPhone running it. Once the plumbing exists, the political conversation changes from "can this be built?" to "why not turn it on here too?" That is our opinion, not a documented plan, and nothing in the coverage we reviewed suggests Apple intends anything of the kind. But it is the obvious next argument, and a company this good at anticipating regulation should have a public answer ready.

Governments are already asking for faces, just through other doors

The documentation offers a useful counterpoint. Brazil's telecom regulator Anatel just approved a rule making facial biometric validation mandatory to register or keep mobile lines, according to Telesíntese. It requires liveness detection and comparison against existing biometric databases, public or private, with new prepaid activations covered by September 30, 2027 and re-registration of existing users due by the end of 2028. Unvalidated lines face suspension from January 2029.

Notice what that mandate runs through: the carriers, their stores, their sites and their apps. It does not need iOS at all. That should temper the alarm a little. Governments that want faces will get them with or without Apple, and the Brazilian rule even includes alternative procedures when biometrics fail, though the announcement doesn't detail them.

Still, we read the Anatel rule as a preview of appetite, not as proof of an Apple problem. Today the state has to go through carriers, build vendor chains and audit trails, and live with the friction. An OS-level face check removes much of that friction. A rule-writer who sees a ready-made, on-device, privacy-branded verification layer has every reason to ask for it. The "privacy-preserving" design is, ironically, what makes the request easy to justify.

What Apple should do before someone does it for them

The risk is not that Apple turns evil. It is that Apple stays quiet and lets the first mandate define the terms. We would like to see three things, stated publicly and not buried in support pages:

• A plain statement of what the OS gate can and cannot be used for: age estimation, not identity, and never a condition for basic phone functions.
• A commitment on whether Apple would accept a legal requirement to extend the check beyond age, and under what conditions it would refuse.
• Documentation that spells out the architectural point Tech Times says is downplayed, so users and regulators read the same description.

Apple has built a reputation on drawing lines in public when it suits the brand. This is a case where drawing one is cheap now and expensive later.

Our verdict

If you live somewhere the selfie option is offered and you need to prove you're an adult, it looks like a better choice than handing over a card or ID. Use it with eyes open, and keep in mind that the claims about on-device processing and deletion come from press coverage, not from independent audits we can point to.

The bigger point is for Apple, not for you. A face scan in the OS is a capability, and capabilities get conscripted. Say where the line is now, in writing, or expect the line to be drawn by a regulator who has never had to defend your users' faces.