As AI-driven spoofing raises the cost of traditional verification, privacy-preserving biometrics offer a different bargain: prove the person, not the raw data.