You need a digital certificate to generate invoices.

The worst an impersonator who got into this system could do is see all of the invoices of services provided to you or your business.

Which is also bad, but not nearly as bad.