FOSS solution to ID verification?

I guess everyone has heard by now of the UK's Online Safety Act and the Tea App so-called data breach. I'm not an expert, but shouldn't ID verification systems be FOSS? I mean, if they have to exist, everyone must be able to check their code and contribute to it, and most importantly, they shouldn't be owned and implemented by a single entity, especially for profit.