It seems like there needs to be a political push to fix the easily exploited systems that just use SSN, etc. E.g. make laws that require banks, etc. to need some other form of authentication.
But I guess an upgrade of systems will cost hundreds of millions of dollars...