Personally, I think our current trend is very useful and should be pursued to the most extreme level: 1. Assume that attacker will get data X 2. Make what you

Personally, I think our current trend is very useful and should be pursued to the most extreme level: 1. Assume that attacker will get data X 2. Make what you keep in data X as useless and uninteresting as possible. 3. Hash data X with the most expensive and safest hash possible. 4. If you really can't do steps #2 and #3, warn your customers about what you are keeping and encrypt the heck out of everything.