[lxgr]

But does that propagate to every entity worldwide using passports for identification, including all non-government-affiliated companies and KYC providers?

[Muromec]

That's very true for a lot of PKI systems too. The revocation lists are published, but nobody is reading them.

[lxgr]

At least they exist. I've tried looking into this in the past, and I haven't really found any public passport revocation list, even of just numbers (i.e. without disclosing associated names or any other sensitive data).