In a market where Equifax having a critical data breach threatened is bottom line, they'd be incentivized to implement this themselves.

A critical data breach doesn't threaten its bottom line. Unless someone uses such a breach to turbo credentials into one of the credit-querying institutions and reveals, for example, the detailed criteria by which such an institution grants a loan.