> In that Santa Monica movie theater, showing my ID was a simple, controlled transaction: one person looked at it for three seconds, handed it back, and forgot about it. The information never left that moment. But online, that same verification process transforms into something far more risky.

This is the fundamental problem, yes. I will never provide my ID online for this reason. If this locks me out of online stuff, so be it. The risk is just too great.