The EU's own experts have modeled it. At least that's my understanding of what they are saying in their "Privacy risks and mitigation" document [1].

Section 5 mentions that this issue could be mitigated at some point in the future by using ZKPs, but here's what they're saying about the status of this ZKP integration:

"This topic will be revisited in Topic G to determine the foundational requirements needed for its future integration"

Doesn't sound like this will be implemented any time soon.

[1] https://eudi.dev/2.5.0/discussion-topics/a-privacy-risks-and...