In the case of online voting, you can’t buy one. In order to create one, one would tie it to the existing identification systems they have (for example, ssa.gov).

Then your argument will be “what’s stopping someone from using someone else’s identity?” in which case we have laws for that. I don’t have all the answers but we can definitely do better.