Option 3: companies that you pay to provide authentication service. Regulated so that they clearly tell you if they are subsidizing service outside of your payments.

We nearly already do this with certificate services and they would probably be in a good position to offer an id service.