I'm trying to figure out how face recognition would be considered a valid and secure enough option of logging into an account.

The way how I see this works is as followed, the user logs into their account via password and enables logging into this account from the current IP address via face recognition. There is no option to provide an IP address. You must enable it for each one. Once the user logs out and wants to login again they can use face recognition which will look into the database for faces that match the user's IP address and on a match will automatically log a user in without the need to provide a username or a password.

Can this be considered a secure enough option to login and what are the risks?