> So it shouldn't matter if your address is public or not, in fact making it public raises the awareness for the problem. That's the argument.
Forget about the internet, we've had almost 100 years to prove we can secure identity theft. And the best thing we can do is to keep our SSN's secret -- security through obscurity. Keeping your SSN private reduces your personal attack surface.
We've had 50 years to secure the internet, and yet, we still have zero day attacks. Nuclear submarines try their best to keep their locations a secret? Why? You cannot attack something you cannot see or hear.
Except we are more on a chess table where we can just trivially probe each cell, unlike the vast volume of the ocean.
Well, this is a bad example, considering public/private key pairs exist,
and work for identity validation,
as long as you don't farm it out to a cheap, know-nothing vendor.