Twitter aside, if any website or app ever asks this of you, please nope the fuck out.

I guess it only occasionally makes sense for government web sites and banks. X might have ambitions to become a bank, so in that sense it might make sense.

So another piece of advice: if twitter ever asks you if you want to start using it for banking, nope the fuck out.

You Americans should get to this century and start performing digital strong authentications like the rest of us. Sending picture of your ID to anyone is insane :)

How we do it here in Finland is that there are digital identity providers which use bank/mobile carrier to identify you. They they use MFA when identifying you. Any service can use these services to do strong authentication for you. And they don’t cost anything for the customer, and is really cheap for the company who wants to identify you. It is also build into the law that you must identify people using these, to avoid identity theft.