Facebook's massive settlement in a class action case over violating a state law on how it uses facial recognition is being hailed as a watershed moment for "biometric privacy."