Practical impact is important to recognize but the concept of potential impact, otherwise known as risk, is most certainly valid; having the most intimate details of your identity stored outside of your own control can have profound risks for any bad actor especially when our methods of securing our identities haven’t kept up with the pace of it being collected.