You can of course function without one, but the nudging towards getting their authentication app is getting worse. For healthcare records, vendors in the Nether

You can of course function without one, but the nudging towards getting their authentication app is getting worse. For healthcare records, vendors in the Netherlands are required to move authentication of their portals to the government provided DigiD¹. Healthcare will be the first field where the minimum level of assurance is being raised to 'substantial', and this means that only authentication via the Android or IOS DigiD app will suffice (right now for other government functions like taxes and planning your booster shot you can also use SMS as (weak) 2FA). While the government is aware that there is a group of people who can't or won't use a smartphone or their app, there is no technological solution on the horizon, despite viable alternatives for 2FA existing (like WebAuthn). This is what I mean by “all but demanding”. Because you do have a right to view your medical records, there is a fallback option which essentially means going to the healthcare provider and asking for paper records. This is behavioural nudging taken to the extreme. 1: Broader than just DigiD actually, supporting European eIDAS standards, but for 99% of citizens this means DigiD.