You should not have to send your personal data to foreign services in order to use government services. You don't know the retention policy, or data storage policy. Your elected representatives (supposedly) have no control over it.
While there is little reason to assume the company is based in Montenegro, the shadiest thing is that a government is using a third party to verify identities instead of fixing the compliance issues of login.gov.
