This is precisely why the authority doing these checks needs to be the government that already issues the IDs.

Using ZKP as the EU proposes is the only way to prevent this data being leaked to unreliable third parties and leaves the knowledge with the institution it derives from in the first place.

I don't know why HN rails against it constantly, it is the obvious technical and organizational solution to this issue.