Companies may get multiple options but you and I and Joe average are going to have to submit PII to several vendors chosen by someone else, exactly like the credit bureau system but without the regulations they have to follow.

The fact that the powers-that-be need to understand but choose not to is that what they want is literally impossible, even with mandatory government blood screenings to access computers. Anything short of requiring identification per POST is inadequate. This whole thing is a fools' errand and we must not give any ground.