Totally agree, and I am unsure why it has not happened after the last breach we had, was it 8 years ago? I dont see this breach as any significance as I thought it was all breached anyway earlier.

Any agree, it should be only a username and MitID is the verifier(password) and without both, it should simply be impossible to create any kind of binding contracts like loans etc. anything else is simply sloppy policy from the government. but again no politician understands IT, neither does the majority in EU about the implications of chat control...

What you write is correct, but it wouldnt make any difference in this case. The information would have been leaked anyway.

It will take a whole new approach to confidential information to really make a difference. I think we need to go the SSI way, and I think at some point we will.