That's my point. The "validation" of that info basically says someone with this name and this birthday and this SSN lived at this address. But there is usually

That's my point. The "validation" of that info basically says someone with this name and this birthday and this SSN lived at this address. But there is usually no additional proof required that the person signing up for an account is actually this person, and with soooo much leaked PII, there are reams and reams of that (valid) info available through breaches.