I don’t know what’s wrong with these comments. This is the kind of smart design we want to see and everyone is doing nitpicking.

Can we have just better things or are we going to reject everything that’s not perfect and by doing so concede the whole point and just give up?

Well done OP for the right approach and your business. This has always been my design (when possible) to approach data security. When you don’t have data you don’t have to worry about its security.

Best of luck, ignore the naysayers.