This can go two ways...
one being not secured, and the result of mass-user identity theft, the other being a revolutionary step in identity verification without invasion of privacy. I hope the latter.