If you could do it with 2FA, you wouldnt need to make Aadhar in the first place. I've followed the program from inception. The real genius lies in 2 things, li

If you could do it with 2FA, you wouldnt need to make Aadhar in the first place. I've followed the program from inception. The real genius lies in 2 things, little of which have to do with tech. The first genius lies in the design of responsibility and liability of the Aadhar authority. The authority is impervious to assault legally - it is the only person who can mount a legal challenge on the misuse of aadhar numbers. The authority also farms out all responsibility of usage of aadhar to "other entities". Thus it can never be held accountable since it only "provides other people a tool". What they do with it, is not the Agency's issue. This is how its engineers can talk on various privacy channels as being fully for privacy and security, the agency itself can be a secure keeper for the biometric information - but the actual harm being done is farmed out to other agencies who can then take the blame.