First, we need privacy regulation (eg a US port of the GDPR) that stops the existing widespread abuses of identification and personal data, especially the abuse

First, we need privacy regulation (eg a US port of the GDPR) that stops the existing widespread abuses of identification and personal data, especially the abuses being facilitated by the current identification systems. Only after this is fixed does it make sense to talk about increasing the technical strength of identification.