We have eID features withiut such big problems.
Simply because the data resides on the card itself and can only be read using a certified terminal.

e.g. A website can get a certificate to establish a secure tunnel between them and your card through e.g. your phone.
Then the certificate only allows getting specific data e.g. if you are over 18 or not.