Digital Identities: Protected or Imperiled?