The world’s largest biometric ID programme is a privacy nightmare waiting to happen