My biggest fear is identity fraud, but perhaps I can trust CoinBase enough for that not to be a problem. Still, I would much rather not upload a picture of my passport if I can help it.
My passport scan has a lot of real information about me: my birthday, my place of birth, my passport number, my PESEL, my nationality. That's a hell of a lot of information that could fall into the wrong person's hands.
