Perhaps the best outcome is that everyone's data is exposed and stolen and misused so often that it becomes useless for any sort of identity verification purpose and businesses and governments are left with no choice but to use public/private keypairs.