Let's assume that (1) KYC as-is is broken and a security risk due to potential data leakage and (2) dropping ID checks altogether is a nonstarter.

What's the solution?

I've seen a lot of hand-waivey "zk fixes this". Ok, how?

product designer since 2018, farcaster DAU since 2023, aiming higher in a humane way

but someone will have your info in their database even if it’s the company generating the zkp

when using zk those support agents would not have access to passport pics etc, they would only have a proof which is returned in context data like confirming the person has access to the account, goes by the name on the account etc

you can make a case that a utility that uses p2p zk venmo txs for (small) immediate, painless onboarding to apps does not constitute a money transmitter 

there was a project that was trying this that no longer seems to be doing it, so maybe not tho