Oh dang - I actually know the answer here.
TL:DR - Regulations are changing / unclear around prescribing medications online and this is them trying to get ahead of it.
Headway’s new facial-scan requirement is probably less about one company getting weird with biometrics and more about where telehealth regulation is heading: with COVID-era prescribing flexibilities, companies like Done abused controlled substance prescribing to the point that the DEA is now signaling that they will demand stronger identity proofing for controlled-substance prescribing.
But the implementation matters. Could you do all this through other means? Definitely. Would it scale as easily / get in Peter Thiel and VC's good graces by using their tool? Who knows.
All to say this is probably more about changing regulations in how care is provided online - and more companies should be expected to follow suit when it comes to prescribing controlled substances.