Handing over Government IDs to private websites and apps is a highly risky and attractive target for identity theft and fraud.