You can simply decline by stating to an agent that you do not want your photo taken and want to opt out of a face scan. From there, a TSA agent should follow standard procedure of looking at your ID and your face to verify your identity.

Corps are for profit, and Mozilla is a Corp… Really sad times indeed.