Identity security is also a product problem. Better authentication, access, remediation and onboarding can reduce friction without weakening controls.