The Equifax hack means it’s time to stop pretending Social Security numbers are secure IDs