More often than you might think. The EU COVID-19 immunology status certificate scheme saw some fraudulent issuances, for example.

And "putting a banner on impacted accounts" both partially deanonymizes and effectively bans legitimate users for no fault of their own.

Travel documents are not a digital identity scheme, and using the ICAO biometric travel document scheme contrary to its explicit design goals is just asking for trouble.