They will have an app that asks to scan you passport with your phone's NFC reader. It's pretty common for Identity Verification.

Wow, that's even worse than I imagined and I was already imagining bad things

Imagine all the things their phone app can exfiltrate. All vaguely categorised in privacy policy of course.