The EU restricts biometric surveillance at home – but its landmark AI Act does nothing to prevent European companies from exporting the same technology abroad.