You’ve missed the point. It is the database that is the root threat. Fingerprint or ID Card doesn’t matter.
I get that, obviously one wants as little privacy intrusion as possible
1