Comment by inglor_cz
In CZ, we have a so-far-somewhat-nonintrusive digital identity that is mostly used to access government services.
Yet we already had an interesting situation which shows just how complicated trust is. Sberbank, the Russian bank, was slated to issue digital identity certifications in March 2022. Then Russia invaded Ukraine and Sberbank got booted out of the country before actually gaining that capability.
What if it was March 2021 instead? How would we treat signatures on documents verified by Sberbank a day before the invasion etc.? What if the content of that document was really suspicious? Etc.