Government services and other essential services requiring an "app" of any kind should be illegal. Strong authentication, sure (where appropriate), but an open protocol (using standards, as far as possible), not "this software". Just make the ID card a FIDO token or something. ​:neocat_angry:​