if you can even verify it, unlike the proposed EU identity app that adds in all the obfuscation, and anti-debugging DRM of the world, also denying operation on any device and operating system not directly made by one of the two tech monopolies in the field.

but that is not only what you should worry about. even with an actually auditable app, they just change it one day and practically nobody bats an eye. the common person can not and will not check anything, it updates automatically and thry know nothing. if they don’t comply, they are immediately excluded from half the world. the thing is auditability is a nice plus, but doesn’t actually matter, because it requires a fully benevolent government. if they want to push through a change, they can roll it out in 5 minutes across the whole country and no businesses can defy it.