It's an opt-in way of blurring a face. Getting an algo representation of somebody's face is easy, so broadcasting it doesn't strike me as a problem as long as that's the only data that is being sent; as opposed to also sending any kind of user id along with it.