Good points about the person being impersonated subject to (completely involuntary) risks. I probably should have phrased my question to specifically ask about

Good points about the person being impersonated subject to (completely involuntary) risks. I probably should have phrased my question to specifically ask about situations where the impersonated is involved and asked to participate in the scheme. I would agree that it's not OK to just... start using someone else's identity without permission. In sibling comments, some other great points were made about the risk profile for the company if you do this without their knowledge. I'm less convinced that I should care about risk towards the company, but from a legal standpoint it probably holds up.