I would imagine that most of the data for the ID checks based on public records (where did a person live; own a car/house/boat; ...) are trivially handleable.

I would imagine that most of the data for the ID checks based on public records (where did a person live; own a car/house/boat; ...) are trivially handleable. Just takes one person to leak the database, which is probably only a few TB compressed) for all of the US and fits on a single HDD/SDD. I would be surprised if these DBs aren't already sold on the darknet. And this DB doesn't have to be super up to date b/c security questions often go back years. Interpreting the DB should be easy to hardcode but even easier handled with an LLM. So the protection afforded by these checks is IMO at best nominal.