Digital ID's is all fine, no problem,..IF the server source code is published publicly with reproducible build capabilities, and app source code is released publicly for a reproducible build of the app so the citizens can see where people's information is going and what level of encryption is implemented in the serivce, otherwise there is an ulterior motive behind it.
If government released all of their server programs under AGPL3, people would help tighten up their security and the citizens would have full faith and confidence government services. I say AGPL because that specifically addresses servers, GPLv3 does not impact servers.