When Code Meets Law: Can Digital Identity Really Protect You in Practice?