The UK government has a democratic mandate to track infections, including by tracking visitors to areas of risk. The correct way to do this, and how most other governments do it is to provide two Apps. One for trivial QR/location based tracking, one for contact based tracking using the government-exclusive APIs.

The point is, the UK government made a technical error, we cannot extrapolate a democratic deficit or malice or anything like that from the information we have from this event.