>The root problem here is that they're using a public number which was never designed for identification purposes and has no security. The solution would be a national ID, or expansion of the US Passport with in-built security measures.

No identifier can ever be used as method to express authorization. This is not a matter of security design.