Morgan Stanley, in response to my #CCPA data access requests, makes me create an account (childhood friend! First pet's name!) in order to let me download a PDF file that only says I need to e-mail them my government-issued identity document.

The "secure website" with the PDF proudly claims "digital signature is VALID" (whatever that means), has a Reply button, and the disclaimer: "Emails ... will be deleted without response."