@BenA Everyone should have their credit report locked always, just opening it briefly for specific loan applications. Assume there will always be a criminal attacking you.
It used to be hard to lock, as you can only do it after a security event. These days that's every day.