Comment by rtkwe

Same problem happened with SSN in the US. It was too convenient of a unique, quasi-secret identifier so it became a password too.