Biometrics marketed as universal anti-fraud infrastructure can quietly become concentrated governance
infrastructure. That changes who sets identity rules, who audits them, and who bears the downside when they fail.
Public positioning is explicit: universal proof-of-human for online services.
World ID public materials describe a reusable "proof of human" intended for integration across
social, dating, gaming, and other digital services.
Source: world.org/world-id (verified in-session)
The capture layer still depends on high-sensitivity biometric inputs.
Public FAQ language states Orb verification involves iris and face imaging, with a model of downstream
custody and cryptographic proof workflows.
Source: world.org/world-id FAQ (verified in-session)
Privacy-by-design can still produce governance-by-default.
Even when biometric data handling is technically constrained, ecosystem dependence on a single
verification rail can centralize practical control over admission, exclusion, and trust scoring.
Inference from platform architecture + published integration trajectory.
Policy debate should move from "data theft" to "infrastructure sovereignty."
The strategic question is no longer only whether data leaks. It is whether democratically accountable
institutions can audit, contest, and override private identity rails at scale.
Policy framing for regulators, compliance leaders, and digital public infrastructure teams.