The EU’s agenda to regulate AI does little to rein in facial recognition