> normalising people uploading identification documents

This is dependent on implementation.

From what I have heard (from ConnectID), some sites are using services like ConnectID as a way to have your bank verify you are of age without releasing any ID or specific details.

But I don't think it's all of them, and I agree it's a risk.