From the text on there, you can see it’s probably not that insecure. Au10tix is the company actually doing the identity verification and they’re an Israel-based company that seems to be pretty legit. I bet X only stores the data in-memory while they send it over to the appropriate APIs or something like that.

Not that I trust them anyway with who’s in charge over there.