If your identity is stolen, at best the company is sued and pays for a few years of credit monitoring. I don’t think this is adequate, given the potential consequences. We need a better systemic solution for this.