What's stoping bots to verify identity? This will not work, especially with frequent data breaches.