It really doesn't. You are showing you don't know how it works.
Webpages can enforce remote verification for sure, that would fuck anyone, Linux included, but a local data file doesn't leave anything open for the idea I just said.
If you have root access you have complete control of what happens in your local environment. The only way to enforce user verification is to make it remote reliant (just like it's done in Spain for example, government regulated digital certificates), and then this new field is useless.
It wasn't a good proposal given that the original intention was compliance in a very useless way, but y'all are going crazy without learning about it.