Computer scientists from Georgia Tech and UC Irvine produced an academic paper where, in the course of investigating the privacy and security of age verification platforms, Firefox's developer tools (F12) were used to deobfuscate some Javascript code related to the age verification company Yoti.
Yoti's CEO made a blog post requesting a retraction and public apology, particularly surrounding an article Georgia Tech published that summarizes the paper and makes the claim in its tagline that Yoti collects and shares facial photos with third parties. I'm not sure that claim was in the original paper or its findings, based on a few rereads. Spain had fined Yoti about $1m USD a few months earlier for three GDPR violations.
Reverse image search via Tineye, episode is Pat the Horse
"Armless 2" screenshot