[padjo]

For 1. Can't the attestation result function as an identifier that the service uniquely associates with an account?

For 2. I have sufficient trust in my society that this would be the case or would have significant negative ramifications for the parties involved. Probably not true for all countries.