Stupidest thing I’ve ever heard, you’ve clearly never worked for a company that’s dealt with a customer info data breach. It costs them massive amounts of money to clean them up, pay for identity protection (never take that) and the PR alone costs them more in the end.