Wow.
On one hand, I'm not surprised.
But on the other hand-- I would be terrified to be in charge of a company who needed to make this ask. It's just such a big deal, such an important bit of information to protect from hacks.
I hope they lose most of their customer base. But I'm terrified they won't.
The gradual erosion of privacy is no longer gradual.