Great, did you notice that the system for Dr’s authorization didn’t leave it up to the Doctors to protect, monitor, and repair the damage caused when the credential was stolen? Did the Doctor’s entire financial life get upended until the doctor personally corrected the error with all the appropriate government bureaucracy?
Identity isn’t a digital token living in a database. The whole business implies that you’re not a human being without a Social Security number, and who you are is issued by the credit reporting agencies and the government. My god man, do you really think your identity belongs to a company or the government?