China’s security agency warned that biometric data collection by crypto firms, including iris scans, may endanger personal privacy and be exploited for espionage.