That's not a technical requirement; you could simply have a government-verified official public key. You could "log in" by signing a challenge message with your private key. The government would have no log that you'd even used your official government ID.