> You have an entire country where institutions operate under the expectation that personally identifiable information isn't easily available like this

I actually look like this as the opposite—SSNs, emails, phone numbers, and credit card numbers are more or less public, or at least relatively easy to guess, buy, or find online, and addresses are quite easy to find if you don't hide behind an LLC. I treat all as if they're public information and I assume our institutions do as well.