It was obvious things like this will happen, unlike banks and government sites social media sites don't have strict cyber security requirements and they want these sites to have a government ID. It was a bad idea from the start.