To be certain the list isn't being handed out willy nilly, your id must be scanned, that will be kept for auditing purposes. If only 10 guids can be given at a time, this is the only way, plus it identifies ids used too often.

And I can guarantee any powers that bee will turn this into a service like stupid id.me where you create an account for guid access