> And interestingly, code.overheid.nl runs from a residential ip address.

That’s not what I’m seeing.

IP address is currently 147.181.37.238, which is assigned to ODC-Noord via RIPE.

ODC-Noord is a data centre for national government organisations according to https://www.odc-noord.nl/

It's an ODIDO ip, but from the old versatel block. I'm assuming it's a business netblock, not the typical ftth/dsl range.

> The government still plans to place the authentication system of all Dutch citizens in USA hands.

That's not a fair characterization. The company that runs it might be bought. That's not planning to put it in USA hands