This is fundamentally why "identity theft" exists at all. It's slight of hand for moneyed interests to shift the responsibility of being robbed onto their customers. It's no wonder "identity theft" is such an issue since there's so little incentive to use a not broken means of verifying identity.

Using a secret number to verify identity is absurd and hilarious.