Couldn’t they also use the Android/iOS’ wallet manager which allows handing it over unlocked while the phone is “closed” (not necessarily locked, though…)?

You guys have IDs? I thought that was only for drivers licenses… And no, those two are not from equal categories.

iOS too. Permissions can even be given only while the app is active if it “requires” them, or for location for example an approximate one is sufficient.