That looks suspicious. You need to have at least some personal data on you for them to drool over.
This sucks and is stupid, all forms of dragnet type operations are.
In this particular context, you could specifically discard 2fa tokens, etc., such that a password isn’t enough to login to these accounts. Now this might mean that your entry will be denied, but you will be incapable of giving them access to what they’re asking for.
It's a bit of a stretch maybe, but not beyond possibility.
"Lost everything in a hard drive crash literally two days ago, pretty busy getting ready to travel and just had time to reinstall before I jumped on the plane."