Honestly, I don't understand how this can work as a practical matter. For companies and their customers to have a chance of surviving criminal hacking attempts

Honestly, I don't understand how this can work as a practical matter. For companies and their customers to have a chance of surviving criminal hacking attempts they have to be as secure as they can be. If it's easy for the FBI to track people they have a legitimate interest in it'll be easy for some guy on the other side of the world to lift your SSN.