Because as the previous commenter mentioned, you’re then in the position of needing to share out much more intrusive info to many more people. It’s also a pain in the ass from a customers standpoint given the statistical rarity of someone being impacted by ID theft.