He’s waving at it. That’s the whole problem.
The showerhead is a security camera. Water comes out of it and so does whatever the terms of service say about your bathroom data. He looks up at it with the exact face of a man who clicked “Accept All Cookies” in 2014 and has been living with the consequences since. Cheerful. Resigned. Slightly wet. This is what “I have nothing to hide” looks like with the towel off. The camera is in the shower and the shower is in the cloud, and somewhere a server just logged his rinse cycle.