It's not difficult to track eyes consistently using computer vision. It's not difficult to aim a laser beam using a mirror galvanometer. If you're struck in the eye with a UV laser beam, the blink reflex doesn't kick in - by the time you've noticed the pain in your eyes, it's already too late. The beam doesn't have to track with particularly high accuracy to cause certain blindness, especially if there's an array of beams.

A decent hardware hacker could build an area-denial laser turret in a long weekend with a couple of hundred bucks of parts. I hope to god that nobody ever does.