“Please register your PADU account at http://padu.gov.my immediately. If not, anyone with your IC and postcode of your IC address can register your IC on your behalf since registration is b4 the eKYC approval which takes 3 days. It will be a hassle to get back your account!”, Ong claimed in a post on X (formerly Twitter).

So indirectly he is admitting that PADU is flawed and vulberable?
If someone can easily register on "my behalf", then all the more how can I be assured that even if I do register, someone won't misuse my data?