While the ID shit is godawful, that’s not at all how it works in any implementation out there right now. There have even been multiple breaches of these systems, further demonstrating their issues, but you know what hasn’t been in any of the breaches/leaks?

Direct connection between ID and uniquely identifiable user information.

If I’m wrong about this I’d love to know, but as far as I am aware the ID leaks have not had shit like email address attached.