Couldn’t they just set up a secure government site so only the government has your ID and only the porn site has your token verification? I think some country did that and it works fine without security issues because the government already has that info anyway