The "authentication service" is the national id. The tax man already knows your name, address, date of birth, financial possessions, income, family members, etc etc. There is no further information, apart from which website you logged on and when. This quite literally the standard of Signal [1]. And this is of course assuming the worst from the national id implementation; any sensible law would require the id provider to delete all information as soon as the login is complete.
