"You would have to steal a username + phone + PIN code for phone + PIN code for MitID app." And when your phone is hacked then all three are up for grabs? "Co

"You would have to steal a username + phone + PIN code for phone + PIN code for MitID app." And when your phone is hacked then all three are up for grabs? "Contrast this to what happens in the US often: your personal info is leaked from the plethora of places it’s kept." And yes, totally never is your govt info leaked from the plethora of places it is kept. /s The problem is not having govt information, the problem is having it kept on phones or entered on devices at all. "I’d welcome any actual arguments against it," See the above. I dislike the automated exfiltration of my identifying information, and then being saddled with the "responsibility" for it. The solution is not to make it even more automated, but to generally never to accept any credential except as a revokable guarantee - doing business as a large corp you should accept the risk of fraud, and presume your clientelle are not who they say they are.