We proposed a way of doing option 2 with the green checkmark without hitting a server and with your private info encrypted on a device you own and it doesn’t leave the device unencrypted unless you approve parts of it; for instance passing your address for buying a house. But of course we are not Thales so it was not chosen.