This is where mechanisms like ZKP + CBA built from a government ID will allow the company to distinguish, even through third parties, all without exposing actual identity.