Why are you making the assumption the person who wrote this response has anything to do with the security procedures that ensure data confidentiality? It's obvious the person is not a security specialist and is only repeating whatever he/she picked up at the last training session.