> What does an attacker actually do with thirty seconds of someone's clean read voice plus a scan of their driver's license?

I could think of quite a few things. I know that my bank and brokerage use voice ID.