As far as I'm concerned the Internet is public infrastructure and you should never expect privacy of your behavior in public places. Besides, "identifying" info

As far as I'm concerned the Internet is public infrastructure and you should never expect privacy of your behavior in public places. Besides, "identifying" information should be useless, but it isn't today. What if we stopped using "identifying" information as authenticating information? PII is only useful because the authentications systems we have in place are such sh*t. Changing this is a much more achievable scope, and would actually address the core value of stolen PII.