Re: It Bodes
We aren't talking confidentiality here, just integrity, so the data (picture and a few attributes) is 'secured' with a good 1970's digital signature which any fool can check is from DVLA. Small market for trusted checkers, but the data has to be available in a convenient form: read from NFC phone, your website, on a plastic card, a QRC tattoo (but please don't) or any other method of your choice, so that it can be offered to the checker.
(Likewise, power of attorney needs a pdf digitally signed by the OPG, not an online system of any sort.)
The DVLA policy in 2009 as presented on the No2ID threads was impeccable; presumably someone has quietly changed it.