I agree that you'd need to securely store the personal information but as it's only used during account sign up it could be an entirely separate system.

It's definitely a huge draw back that you'd risk such important information.