[yencabulator]

> I’ll concede that “identity theft” could conceivably have a reasonable meaning in the context of e.g. Estonian digital identities where you could in a sense steal someone’s private key.

Stealing someone's private key still wouldn't be "identity theft", they'd just need to bootstrap a new key the same way they got the government to trust the previous one (and revoke the old one).

It's just victim-blaming and PR attempting to make companies not liable for their bad decisions.