That's a very good technical solution, but socially it can be foiled by an official-looking alert saying "failed to scan card, please do X instead".

And that's assuming the technical solution is deployed everywhere. I'm in the EU with one of those IDs, and I still had to upload photos of my passport and scan my face to open a bank account. The identification process even had its own app that I had to install.

But then again, should the EU follow up with a similar policy, it could mandate the use of these checks and prevent/penalize ID photos. I’m very optimistic here.

Exactly. I'd concede this point if I'd seen a giant public awareness campaign informing people which official sites to use and general safety awareness about it. I can tell you, literally nothing like that has happened. Not an insufficient effort at it - no effort, nothing. It's clear the people in charge are just head in the sand about this aspect of it.