They should instead be hired for penetration testing and then have the ability to pay their child support.

“Identity theft” is bullshit. They didn’t steal an identity, they stole credentials. But even though those credentials were created and maintained outside of our consent, control, and often contrary to our interests, somehow we’re responsible when they get stolen.