I think he meant that the proof of immunization is tied to an id. It's not like an anonymous token you can hold that says you're vaccinated.