The implication of zero knowledge proofs is that no private data need be shared. The “zk-something” you and Molly both brush over translates literally to “verifying knowledge without any private information having to be shared or checked.”
How can you verify something about someone's criminal background that doesn't ultimately share the information?
Ah. No. All Vitalik is saying is that you could use it, but it's not a requirement. So it's on the person/organization who's attaching that irrevocable token to not expose that information.
So yes. He is brushing this issue aside, and so do you.