This is the real and hard problem to solve. As far as I know, there are identity-verification services using other, semi-publicly-available data, which can stil

This is the real and hard problem to solve. As far as I know, there are identity-verification services using other, semi-publicly-available data, which can still be spoofed for a lot of people, and some that use just-in-time photography (of your face, driver's license, passport, etc.), but that relies on more on-device security (and thus less end-user ownership of their devices). It ultimately falls to the government to provide a more robust solution.