You can do authentication without something that's tantamount to someone's government ID. I love when companies make me give them my phone number, and then they get hacked.