The bad idea was to have a secret identifier in the first place. Who thought that "a ten digit number printed on a bunch of documents" was a good thing to use as sole proof of someone's identity?