There's a bright side to this. With people getting used to every website casually requiring a face scan and ID pic, setting up phishing campaigns and opening rogue bank accounts is going to become easier than ever.