[jangerhofer]

The hole in this system is that there is still no good mechanism for verification, at least in my eyes. What is to stop a tamperer from creating UUIDs not associated with a citizen? That's why I would consider tying to a person quite publicly.

At the same time, perhaps such a system reduces the surface area for bad actors. Now, perhaps, just the registry/database of UUIDs is a primary target.