I think it’s helpful to put some thought into why you use Linux and what you really need from it. I use it primarily for choice, privacy, and to just not be using anything by Microsoft/Apple/Google. Security is nice to have but it’s not the reason I’m using Linux, so handing over my photo ID to a third party I trust is an acceptable if disappointing risk. Sure, my OS will be tied to my ID, but as long as my online traffic isn’t that should be fine. If they wanted to monitor my online traffic it would make far more sense to do it at the VPN level instead. Not by having my open source operating system redirect my traffic so that it’s associated with my ID. The big risk is social media requiring proof of ID. Bots are becoming more and more common and proof of ID available at the OS level on Windows, Mac, and Android would be very tempting for social media. That’s a different concern though.