But one of these passes is nearly worthless (in the sense of impersonation) if you don't also have a valid ID of the person it got issued to and you look the same.
When my vaccination pass would "leak" then my name & birthdate would be leaked and they would know someone of that name and birthdate got vaccinated but other than that, they can't impersonate me as if they presented the pass they would be asked to show the corresponding ID as well.