We have "mail as 2FA" used pretty widely here, and identity theft usually involves someone e.g. opening a credit card or ordering products in someone elses name, and then stalking their mailbox in order to actually get anything.

So people simply got lockable mailboxes and that works pretty well.