The infosec professionals won’t solve it by throwing up their hands and giving in to the Nirvana Fallacy.
What will happen is a bunch of news stories about people getting caught when the QR code on the specified passport type is scanned and either doesn’t match the person’s ID or doesn’t work at all. If the individual was trying to fly or cross an international border using a counterfeit, the story will also describe how they were arrested and fined.
There’s already a trust ranking of standard passports when it comes to entering a country. Immigration authorities and border guards will be given similar guidance regarding a given country’s vaccine passport(s) depending on the status of variants/mutations within that country and vaccinations administered for them.
For stores, stadiums, restaurants, etc. that want to keep out the covidiots it’ll likely fall to staff and normal rent-a-cop to do the checks.
Or “freedumb”. Sorry you live in such a state, but my understanding is that private industry will offer vaccine passports to residents like you in the absence of a state programme. Meanwhile, your state will have to come up with a better reason once private businesses sue it over the prohibition.