Hello, my name is Robert; drop table VaccineRecords haha. In reality they are using very crappy development for these things. Probably not that difficult to mess up or somehow link to a different URL that shows a sanitized page of what they want to see. Or do a dropper. Or login with a random healthcare provider creds and insert records or or or. but I wouldn't risk it. I may be tempted to Rick roll them tho. Plus they will fix all of that over time. The ultimate badass move would be for a certain state or country to declare sanctuary and just taint the well in a legal way.