First of all, we don't really care, do we?

Second, it's not just identify and authenticity.

There are data breaches that leak a lot more information than just an identity. Sometimes the mere fact that your identity is in a breach is problematic already.