I haven't quite figured out how the hyperbolic "I've got nothing to hide" gets past the issue of account passwords.

Even if we assume a new "real name only" global system of online identities, that would still require that false testimony or simple errors never get attached to such identities.