> Before there is any talk of strengthening identification, we need a US GDPR codifying a basic right to privacy.
That's a fair point, agreed. Privacy needs to be legally recognized as a strong right before we allow more centralization of this sort of thing. (Though sadly it's already pretty centralized, just not by the federal government.)