As Greece touts EU vaccine passports, privacy champions warn of risks