How do they discern the difference between someone without an account (ie: a new face), a poor result from the network, and someone who's opted out? Unless the default for everyone is "opt-out", which I highly doubt.
Maybe they use some sort of locality-sensitive hash to efficiently gather a set of (approximate) candidates that are close by in that embedding space, and then use some heuristics to further narrow down who the most probable match is.
