Before you freak out about the privacy implications, I would definitely encourage you to check out the specification.

This is a notably stripped-back solution that seems like it may have found a very privacy-oriented approach. https://twitter.com/verge/status/1248656731711905794

The centerpiece of the spec as far as I'm concerned is this chart of how the "scanning" process where you record contact works. Notice which way the arrow goes from "Cloud" and which way it does not.

I think it's totally normal to be uncomfortable about the way our technology could be used for bad things, but let's examine the components and instances here, because the really nasty stuff? That didn't need a virus to be implemented. People are doing that just because.

There are a lot of big people using this moment as a time to signal their revulsion with the state of tech privacy, but if the first moment you use to signal your revulsion is when you're being asked to do this to help others instead of yourself, what does that look like and say?