It's a lot simpler to steal a million people's identities in one shot than it is to mug a million people -- and that's not even getting into phone security.