Of course, it would also need to support multi factor authentication and keep all data related to that secure. Might be hard to do that, but seems pretty hard in the existing industry.