That's already the case for the German Id, you need a PIN to do anything online with it.