Problem really is that things like SSN or ID numbers should have never been treated as more as just one possible semi-public unique identifier. Never anything to be used in identifying a person for a contract.

This would implicate close to 100% of American firms and most of the adult population?

If they are clearly misusing a system (SSN) never designed nor intended that way. And continue to do so even after being shown the facts.