havent they proposed OS-backed identity (ID-card) verification?