Would it be invasive for you to be required to walk around naked? Because naturism resorts with those rules exist.
These examples, of course, does not bother you because you decide not to go to them if you don't want to go to them.
I am not advocating for a complete lack of privacy laws. Disney isn't allowed to put cameras in bathrooms. Disney is required to comply with CCPA in California. I'm just pointing out that private property owners are allowed to generally do this stuff, and pointing out that Disney seems to have some privacy measures in place (e.g., utilizing hashes, having a short retention window, etc).
What if tickets where given with devices; the device would hold the hash value of the facial recognition and zero data would be stored outside of the device. have open 3rd party reviews of these processes and made public so we keep our world safe but without the bullshit excuse that "privacy has to be given up for security".