My problem with the whole thing is that even the companies doing it right aren't initiating it. They need to verify at their end first; and they need to initiat

My problem with the whole thing is that even the companies doing it right aren't initiating it. They need to verify at their end first; and they need to initiate that. This is our password & credentials, now please confirm your identity.