Using ZK for privacy preserving compliance is something even my tech-illiterate, retired mom sees as a no-brainer
This is the honeypot problem, and it's structural.
If you collect and store IDs to verify people, you've built a target.
Given enough time, targets get hit.
ZKPassport proves facts like age, nationality, sanctions, personhood and document authenticity, without collecting or storing any of it.
The check runs on the user's device and returns a yes or no.
No database. Nothing to leak.