For sure, not something I'd feel comfortable deploying either. The `www` subdomain can certainly be removed at least, I'm fairly certain. Though I would definitely err on the side of caution rolling something like this out since it'd be scanned by all sorts of devices in many different environments.
Unfortunately removing the www doesn't work with the current app. At least for the iOS app, I imagine that www.service.nsw.gov.au is an associated ___domain, but service.nsw.gov.au is not https://developer.apple.com/documentation/Xcode/supporting-a... .
