In the US if someone has your social security number they can do a lot of things with it. This is not the case in Estonia where they have public key cryptography so even leaking a public key doesn't mean anything. They'd need the physical ID with the chip on it as well as the password and PIN to access anything which is exponentially harder.