I agree. However a comment in another thread explained they would need the SSN to make a report with the credit bureau if you missed payments. That's an easy

I agree. However a comment in another thread explained they would need the SSN to make a report with the credit bureau if you missed payments. That's an easy fix in my opinion: The SSN should be used for read-only. Once the credit report is read/accessed, the credit bureau issues a write-only code. The company then deletes the SSN and only retains the write-only code. If the write-only code is leaked later in a hack, it is useless to criminals trying to open new accounts.