Aside from the fact that it was stored in a public database, there’s no need to store photos of the IDs at all. The account can just be marked as verified and move on.

Also I doubt that measure would keep a man out if he really wanted to join…