You’ve missed the point. It is the database that is the root threat. Fingerprint or ID Card doesn’t matter.
Discussion
I get that, obviously one wants as little privacy intrusion as possible
“One means I”, “Only One I”. https://youtu.be/Xiw-y2zM11I?si=03ZJNhRtIKvzmm3X