> For example, what’s to stop me from saying “Hey Google, I am <full legal name / ID> Even more fun, if you call a bank, you often have to key-in your account

> For example, what’s to stop me from saying “Hey Google, I am <full legal name / ID> Even more fun, if you call a bank, you often have to key-in your account number (which can be easily decoded if your phone sounds back the tones, which most do), then tell you name, your address and sometimes your other PII like Social Security number or part of it. Record that call and that's a complete identity theft package, nicely wrapped, just replay it to the bank (which name you've also have recorded, if the user called on speaker, which they did because who wants to keep the phone pressed to your head all the time while you're waiting and listening to the muzak) and you get full access to the user's bank account.