I would agree with my colleagues. This is not something you take lightly.
Having said that, in the instance of ArriveCAN, and with all due respect to Prof. Clarke, I think it's an example of the government being very nimble and agile, and able to do something that was very effective in a short period of time.
You have to take some risks. I'm not saying, “Put the app into production if somebody shows up and says it can do X”, but you should definitely look at it and think about the various considerations that have been articulated so far.