If your passport leaks, they can [create a bank account]

This seems like a country-specific problem. In Japan, even if opening an online bank account, a photocopy of a passport is simply insufficient to pass identity verification. Additionally, most country passports contain an IC chip that can be used for attestation. Any eKYC system that does not attempt reading data from the IC chip is fundamentally broken.

It should be a total non-issue for photocopies of passports to get leaked.