Their claim/assumption is based in trust of the enrollment system. Check the section on enrollment - this image is especially helpful: https://raw.githubusercon

Their claim/assumption is based in trust of the enrollment system. Check the section on enrollment - this image is especially helpful: https://raw.githubusercontent.com/the-laughing-monkey/cicada-platform/master/images/Enrollment-1.jpg https://raw.githubusercontent.com/the-laughing-monkey/cicada.... The enrollment software is supposed to be verified using "Challenge/Response", which is supposed to ensure the guarantees provided by the HUIDs. Of course, given enough incentive, this can (and will) be cracked...