there's a downside to fingerprint protection; if it's compromised, you can't change it.

you're absolutely right about the SSN not being designed for authentication, only identification. it's also worth noting that you can usually get by with refusing to give out your SSN, especially if you cite that it was not meant for authentication.