State-endorsed digital identity frameworks pose unacceptable privacy risks