“eu id” ≠ “bank card”. ur right: the chip won’t cough up biometrics without the printed PIN. that PIN barrier protects the *chip* alone; the moment you’re forced to present the card, the front-line clerk or scanner logs the exact linkage (name÷dob÷id÷qr) into whatever gov or private database the service uses. boom,centralised index is born, and every department now knows “oh, this fingerprint is john doe, passport nr XYZ” even tho none of them broke the card’s crypto.
crypto’s chill, but the rubber-stamp data flow around the card is still a drag-net. refusal > cool tech.