Any sane company or government would have already done this

Only if they had no concern for people’s privacy, and no notion of compartmentalizing access to the data to prevent abuse and limit the impact of leaks.