I'm pretty confident that the current system is the way it is because it's a sweet spot between user friendliness and difficulty of spoofing and/or impersonation. Slide it one way in either direction and the other gets worse.