OK, here's another one.

How about taking all these websites that require PII onto their own members-only domain?

This actually should have been in place and well fleshed-out before Google & Microsoft started pushing their "account" nonsense.