Unfortunately, there's no business justification for any of them to do this. That is, the financial incentives just don't exist.

Until we decide we've had enough of this and pass a real law that holds CRAs liable for the data they collect and store, absolutely nothing will change. Equifax's competitors know that, with no such law on the books, they have enough money to withstand the very few lawsuits that could come their way as a result of a breach. They know the average person doesn't have the spare cash or time to pursue such a case.

Equifax should have been liquidated after demonstrating the degree of negligence they tolerated for years. They're still standing because we let them.