Replying to @Velofisch and @mmatthiesen, @IABEurope, @sas_assion
Yes, it rides on whether the proof is sufficiently credible that downstream parties fulfil accountability requirements at a level required by the processing's risk. Withdrawal equivalence is also a major concern.