That doesn't really make it less of a security threat. Sites still don't know how to secure it. On my own site we do the same, and have no other answer but end-to-end encryption which we then charge for.