Can you still have decentralised ID and eat your blockchain

A report from DARPA has identified serious security flaws in blockchain and importantly, that blockchain is not decentralised after all.

With this in mind, how should government proceed with self sovereign projects? What are the alternatives to having a decentralised identity without the need for a blockchain? Can you still have decentralised and eat your blockchain?