> With privacy preserving cryptography the tokens are standalone and have no ties to the identity that spawned them.

I suspect there will be different levels of attestations from the anonymous ("this is an adult"), to semi-anonymous ("this person was born in 20YY and resides in administrative region XYZ") to the compete record ("This is John Quincy Smith III born on YYYY-MM-DD with ID doc number ABC123"). Somewhere in between the extremes is an pseudonymous token that's strongly tied to a single identity with non-repudiation.

Anonymous identities that can be easily churned out on demand by end-users have zero antibot utility

The latter attestation will be completely useless for privacy.