In many cases you don’t need to verify the identity of every user. You can use some signal to determine when you need ID, or require it for accessing certain products/features.