Isn't identity theft a problem in the US? Especially because something which was not meant to be used as ID is used as one (the SSN)?