So I spent a little time reading the #Worldcoin white paper. Despite that, I am not convinced that "privacy preserving" and "biometric verification" ever belong together. I think it has to show how that is true beyond "trust us". I don't think they succeeded.
Maybe this is secretly backed by the TSA or something.
You can read it yourself at https://whitepaper.worldcoin.org/