One important feature of a legal ID is that it's hard to copy, so attestation from the hardware storage would have to be basically mandatory.

But yeah, the user could have a choice to this extent.