There is an ORCID iD identity extended type in the default types, but there is no verification that what is entered is of the correct format. I would think, that at a minimum, it should expect entry to start with "https://orcid.org/" followed by 16 digits separated by a dash every 4th digit.

This should be enforced if the ORCID iD is added during enrollment or from the Co_Person page.