Lawful‑access abuse amplifies registry risk

National registries often grant private firms persistent 'lawful access' to verify identities for services. If those access privileges can be misused or lack fast containment (revocation, auditing, minimization), a single abused connection can expose orders of magnitude more personal data than the resident population, multiplying identity‑theft and fraud risks. — Shows why policy debates must move beyond 'hack prevention' to restrict, audit, and time‑limit private lawful‑access to government identity databases.