Their point of Aadhaar being secure is only based on the data being encrypted with RSA public-key cryptography. They are totally obvilious to other threat vecto

Their point of Aadhaar being secure is only based on the data being encrypted with RSA public-key cryptography. They are totally obvilious to other threat vectors. Their specifications state that the vendor should ensure end-to-end encryption. Say vendor X uses a kyc API which follows the UIDAI guidelines to the point, there's nothing preventing the vendor from storing the biometrics on the device before sending it to the kyc. Not to mention that the biometric can be bypassed with OTP SMS & anyone is cybersecurity knowns SMS aren't fool-proof. India is culmination of different civilizations and hence the diversity. No matter how corrupt the previous governments were, they weren't a direct threat to the democracy like the current government is under the pretext of religion.