In quite some cases companies could do the same thing without facial recognition: if they sell tickets to named people and verify official IDs. It's just that (good enough) facial recognition makes this available in more cases.
(BTW. There's a likely fundamental limitation of facial recognition that might come into play here, in that there's a lower bound on false positives, because the space of faces is not that large. This limits the number of banned people before the FP rate climbs too high to be acceptable, but I'm not sure if the limit impacts anything in practice.)