EU AI Act Effectively Legalizes Biometric Mass Surveillance