If the fraudsters take your credentials through H&R Block or whatever, and they have your information, well, there is nothing here that will stop them from claiming huge amounts of money on your behalf. The CRA doesn't seem to see that and to have enough of a firewall in their computer system to stop that. Fraudsters are in the bank and in the open: How much do we want? They claim that credit, and there it goes. It's gone.
The CRA has to have a better firewall and computer system to prevent that from happening.