Is there a way to extend Identity or is it necessary to do a complete replacement, by using @Install with a higher precedence (eg FRAMEWORK, APPLICATION, etc.)? In a previous project I did the latter but it seemed like such a waste.
Yes you can extend Identity, it's described in the security chapter of the docs.