@BenA Everyone is going to need to have their credit frozen all the time. Periodic unfreezes for specific credit applications function essentially as 2FA where the username and password, name and SSN, are easily guessed.
The best thing the financial industry could do is change the general temporary unfreeze into a specific 2FA that could only apply to a particular authorized entity, time, and purpose. They need to assume that criminals have all this info on everyone and design accordingly.