Social security number is public information as well and it's never used for authentication so you're right. You normally identify yourself using BankID, which

Social security number is public information as well and it's never used for authentication so you're right. You normally identify yourself using BankID, which is issued by your bank and tied to your phone. Identity theft is still possible but requires much more intricate methods.