"leaves people exposed to phishing and identity theft"
In Mexico, it also leaves people exposed to a lot more...
You could argue that the separation between the Bad Guys and State is Work in Progress, so if they want to get you, they have the data anyway, but still...