From what I can tell from the ZKP spec and the research paper linked there, it seems like it should work correctly. In other words, even if the government and the website collaborate, it can’t actually determine it’s you. That requires that it’s implemented right and that it’s always used though, which is not the case since it’s an “experimental feature.”