Most places with digital IDs use either a phone card reader or the phone’s own NFC terminal to read a contactless smart card. The cryptographic key comes from the smart card, with the phone as a payment terminal.

Nothing advanced is required. And sure, your phone can be hacked, but there’s only so much fearmongering to go around.