Beyond the obvious password failure, what does a leak like this reveal about the underlying design philosophy of national ID databases? The vulnerability is in the architecture, not just the access.