This is a really nice benefit. It honestly was weird coming from a country where knowing the social security number alone lets you take over someone's life and

This is a really nice benefit. It honestly was weird coming from a country where knowing the social security number alone lets you take over someone's life and as such is highly regulated and locked down. The first time a random site prompted me for my personnummer I had a heart attack. But once you adjust to it for a second, it's quite nice. My personnummer is public info, and that's fine. With just that number alone, you can't do jack shit. Everywhere it's used online requires you to confirm/sign an action with BankID, or requires a valid ID and physical presence IRL. That's not to say it's impossible to social engineer your way into getting a BankID issued to you for your victim, but it's on the level of "getting someone's social security number" in other countries hard. Any site using BankID for auth doesn't get access to the cert so they can't leak it, and you can revoke your BankID for individual authenticators (like your phone) which you can't do with an SSN.