Ask HN: Could I refute companies w poor security for asking “What’s your SSN”?