If you have to scan your ID to use a website, that's not privacy or safety; that's surveillance