If your iCloud backup and password are comprised, you can return to an Orb to regenerate a new credential. Because your IrisCode will be unchanged, we can look up your old ID, invalidate it, and issue a new one.
Interesting. But does mean if I don’t care about the Worldcoin ID I could give my iCloud back up to someone who was willing to pay me for it and then they could use that to Sybil attack stuff?