> But the idea that giving your ID changes anything is a fiction

I'd say it's an expansion of the "attack surface". Not to mention: what happens with those IDs after the fact?

> I don't think a theorical, overblown and mostly fictitious increase in risks

It already happened in my country (an European country) during the pandemic (and not in the first days). So it's not fictitious.