Not much, proper PII sustainment over decades (generally) is too demanding for universities unless they have proper resources and knowhow as well.

The US banking system has some blame here as well, just knowing someone’s bank account details shouldn’t let anyone transfer money out of it. IBAN system is quite good at this, that people just share their account numbers with each other and even some merchants like restaurants accept payment through IBAN.