Hackers have stolen government ID data from Discord.

My usual refrain here is "don't collect data you can't protect." And I stand by that.

But age- and identity-verification laws force companies to collect that very data, thereby creating a minefield of needless downside risk exposures.