With a view on current geopolitics I find it absolutely irresponsible to use two US companies for attestation. The sanctions on ICC judges/prosecutors at the latest should have shown that it is a matter of national security to avoid a possibility of being completely shut down by an unstable US government. How do you propose to deal with people who get sanctioned or banned by Google/Apple for whatever reason? What measures do you have in place so these people can still access their ID?