> Something like a proper authentication protocol would be useful for sure, but I would bet good money that the government would roll out some weird homebrew nonsense that would be compromised in hours.

Did you read the linked article? CACs are in use by the DOD and have been for years.