I think it's likely the US ships "self custodial" #DigitalIdentity first, which is a flow where you submit your KYC documentation, that gets manually approved by the state, and then you can prove who you are using an app that "carries" the credential during login.