I'm not sure that's a fix either, though gets most of the way there perhaps - the journal is trusted to put correct data into the Crossref record and so can claim to have authenticated the ORCID even if they haven't.
e.g this Crossref record:
https://api.crossref.org/works/10.32885/2220-0975-2023-3-95-106I did not write or have anything to do with this paper, but "A.M. Nesterov" has my ORCID attached in the Crossref record (
https://orcid.org/0000-0001-9227-4188) and "authenticated-orcid" is marked as true.
I *think* it's errors / bad journal CMSes rather than the journals themselves being a bad actor but still not great.
Ideally if a user makes a change to their ORCID record then it'd be reflected in Crossref (and then propagate downstream to OpenAlex and any other systems that pull metadata from it).
Best,
Euan