Good advice for people who have been Optus customers since 2017, I have been one, is to enact a credit freeze. IDCARE has a fact sheet on freezing your credit.

A credit freeze means no-one, including you, can apply for credit in your name.

Talking about caring about identification, an Australian institution like that not using a .au domain name is a little triggering IMHO.