Sure, that's reasonable. Your original comment sounded more like, "Why do people even care?" but I'm totally onboard with the idea that actually implementing so

Sure, that's reasonable. Your original comment sounded more like, "Why do people even care?" but I'm totally onboard with the idea that actually implementing something like that is very problematic. From the customer point of view, though, "How do I know it's really them?" is a reasonable question because they don't really understand the implications of the answers.