Instead of trying to shoehorn security into systems that were never meant for authentication (PSTN, social security), how about building one that’s actually fit for purpose?