It depends on the purpose. For identity verification purposes, when you already have independent reason to suspect that someone is specifically Person X, then a "very low" false positive rate is likely sufficient.

For filtering, however, "very low" isn't enough. Suppose your facial recognition system has a 0.001% false positive rate (one per 100k), but you have a list of 1000 banned faces and your venue sees 10,000 visitors per night. You're making ten million comparisons, and that "very low" false positive rate will still result in 100 false matches.

That could still be okay, if a match just involves (here) pulling the patron aside for an ID verification. Asking 100 people for ID is much more benign than turning 100 people away at the turnstile. MSG here did appear to follow the match with a secondary verification (per the article), but I shudder to think of all the venues that will hear "very low false positive rate" and not really think through the consequences.