Indeed, which is precisely how social credit systems work.
Note how many of the 'restrictions' we've had have involved getting permission to do something ('need to wear a mask', 'need to sign in', 'need to check there aren't too many people in here already', 'need to book ahead') that previously we've done freely.
We've got fairly used to this behaviour change, and it appears we're about to have one more round of it, so then they can 'make it all easier' with a Covid app (or, as they are experimenting with in Sweden, a microchip implanted in the wrist - yep, another conspiracy theory comes true...)
Tin-foil-hat time? Maybe, but doesn't it seem rather closer and rather more likely now, than when I was saying the same things 15 months ago?