Of course, but fraud/theft prevention is easier to defend legally. There are exceptions for exactly those use cases.