#4 Don't Trust ID.me