The ID on the phone thing is weird. Like I’m gonna give my phone to a cop when they ask for my ID.
You don't do that. You present the cop a QR code generated on the fly by the ID app when selecting "show ID" (or driver's licence, in our country) that they then scan with their equivalent app or device. You don't physically give them the phone. At least that's the idea.
Like in many countries (traffic or street) cops here barely have a high school education and it's not unusual for them to be too stupid to be able to scan a QR code. So carrying your plastic cards with you is prudent.
To add something here: HAProxy's ACLs are more powerful than anything nginx, Apache or even Envoy can do. Of course HAProxy is not a web server but "just" a reverse proxy that speaks HTTP (and TCP) but what you can do with its ACLs is often extremely impressive in its simplicity and elegance. A single-line ACL in HAProxy would require loading additional modules in nginx and writing a screenful of configuration directives. Though the average self-hoster will probably never need any of the power HAProxy offers.
In the past 20 years I have professionally used all four of these as web servers and/or reverse proxies and I am pretty confident that HAProxy beats all others when it comes to request processing. Though Envoy might be getting there.