I can't say the idea of a verifiable government id being demanded by every social media or other sign up sounds that thrilling to me. It'll just be facebook demanding a scan of your driver's license in a different form. The SMS verification step where you phone number is demanded "only for security" (and then used for advertising 10 minutes later) is bad enough, but at least it is still possible (if onerous) to get some some separation there.
I'd honestly just prefer TOTP or hardware tokens be mandated as an option for 2FA if you offer it.
I'd honestly just prefer TOTP or hardware tokens be mandated as an option for 2FA if you offer it.