The UK followed the worst path both technically and in terms of project management; a large part of the work (although it seems not the app itself?) was handed to cronies: https://www.theguardian.com/world/2020/may/04/vote-leave-ai-...

> not having permission from Apple to use a specific API in an app

The privacy question is real. While it is very awkward to have companies making public policy, sometimes it's the more secure outcome. See also the FBI's use of exploits to bypass iPhone security.

This is particularly awkward when "a means to determine who has been where and with whom" coincides with a time of large public demonstrations.