At this point the primary thing that's keeping me from switching to Wayland (KDE) is lack of support for remote desktop software, especially with multiple monitors...
Hopefully AnyDesk and Remmina will address this issue before KDE ends it's mainline X11 support next year.
> The thesis is that immigrants have no constitutional rights because they aren't citizens...
The constitution is quite clear on this issue and it has been affirmed repeatedly over the last 100+ years by the high courts. Anyone and everyone in the world who is on US soil and subject to US jurisdiction is considered a "US Person". This status is regardless of their nationality/nation of origin, the manner by which they arrived on US soil, or any other circumstance.
As a 'US Person' they are protected by the US Constitution with only minimal exceptions; the right to bear arms[1], ability to run for public office, or vote in federal elections[2]
This is by intent and design and is a necessary cornerstone of US democracy!
This is laid out in - Article I, Section 8, Clause 18 "Aliens in the United States"
> The Court reasoned that aliens physically present in the United States, regardless of their legal status, are recognized as persons guaranteed due process of law by the Fifth and Fourteenth Amendments. Thus, the Court determined, even one whose presence in this country is unlawful, involuntary, or transitory is entitled to that constitutional protection
[1] Only citizens and permanent residents are allowed unrestricted access to firearms.
[2] Some districts allow pr visa holders to vote in local and state elections
There's an issue with the flow you described; the party requesting verification shouldn't directly interact with the verifying agent (the state) as this leaks to the state the identity of the requesting 3rd party.
The correct flow for preserving anonymity is: the requesting party issues a challenge token to the user -- the token header describes the type of request (>=18yo?) and the token body is completely random(). The user then takes this token and has the challenge verified (signed) on their side, the signed token is then returned to the requester.
This way the state never knows the identity of the challenge issuer.
() Note that this scheme requires good faith on the part of the challenge issuer that the token body is actually random, although it would seem that a simple DH-key mechanism would patch this vulnerability.
Hopefully AnyDesk and Remmina will address this issue before KDE ends it's mainline X11 support next year.