Giving out the Ids directly is stupid. Any sane scheme would use unlinkable attestation.