A classic example of identifying the threat model when designing a security system. There's no point in making a very expensive and complicated system to deny

A classic example of identifying the threat model when designing a security system. There's no point in making a very expensive and complicated system to deny ID cards to international "Day of the Jackal" level of murdering terrorists because if you make the documentation process more complicated than simply killing someone who looks like the terrorist and taking their wallet... Meanwhile the actual threat model for identity theft is a dude setting up an assembly line of dozens or hundreds of fake IDs to get loans from banks that are never repaid. The registry is somewhat lax, the registry of registry users is somewhat better run. I can request my birth certificate be mailed to me and as long as nothing interesting happens, nobody cares... but if a couple bad loans were documented by BCs mailed to me at my house... this is why the BC request process seems a heck of a lot more interested in legally identifying who is getting the certificates than it is in how much I "deserve" to get the certificates.