[fosco]

agreed, imagine the ability to look at all of the data they have and find a dump on that.

idea time: Cryptographically store this data on physical cards that can fit into wallet and be managed by the user and 'revoked' if they lose the card. obviously things like backing up and storing will still need to be done, but that does not necessarily need to be reachable via an API or on the internet all after it has initially been created.

I spent two minutes on this idea, be nice :-)

[toomuchtodo]

https://en.wikipedia.org/wiki/Estonian_identity_card

[lowry]

Belgian eID is similar. But the state crippled the ability to sign with it, because they wanted to have control over authorisation.