> What Samsung actually did was implement software that would sometimes coincidentally "recognize" a face, and more often would "recognize" a photo of the target user

No way unique to Samsung. Every implementation I've seen fails at this, even the latest one in Windows 10.

If you care about security, don't use it. That's my advice.