I know it is easy for me to say it and harder for you to do as a business, but we need to find ways around such requirements.

I would not use a btc app which requires me to scan my face. I'd rather use a non EU company over VPN etc.