I don't think you can dismiss that argument until people actually do there jobs. Case in point there has been a big push to stop collecting SSN on so many forms. Not because you can't collect that information saftly in theory, but because people and systems have repeatedly failed to protect it in the past.