It's a creditor's responsibility to issue credit to the correct person. They are probably more worried about the data breach than consumers are. If a fake account is opened in my name, I'll send some scary letters  until it's resolved.
I put a fraud alert on my credit report through Transunion . They communicate the fraud alert to Experian and Equifax and creditors must contact me at a phone number I provided before they issue credit in my name. Though this is only for 90 days, it was free and can be extended. It buys me time to make a decision in the future, Japanese general style
Not only will additional fees be required to freeze experian and transunion, the process of freezing and unfreezing credit is far too time consuming and onerous.
Not to mention that the mechanism for unfreezing your credit, if you lose the codes/pins/passwords that you established when you froze it, is to verify using the very same personal data which was leaked in the first place.
I really hope that this incident is the end of these cartels and their shitty business as we know it.
How about credit profiles are locked by default and if I want to to unlock it to apply for a credit card then I will pay a fee?
Check whether your state has something similar.
It's why a bank getting defrauded by someone opening an account in your name is not the bank's problem, but your problem.
Listed under "how do I place a freeze..."
Others will charge a fee depending on state $0-$10
Listed under how do I place a freeze... The link and number.