Yeah, that's an issue. Though that is also significantly less trustworthy since it only proves possession of an ID, not ownership. Afaik this method is therefore legally insufficient for platforms that need to know their customer (banks, stock exchanges etc.).