> Hmmm, I get why he says this, but what is the practical scenario here? We remove phone numbers from accounts after we make them? But doesn't that just mean we

> Hmmm, I get why he says this, but what is the practical scenario here? We remove phone numbers from accounts after we make them? But doesn't that just mean we disable 2FA, making our accounts less secure and therefore more likely to be compromised by other means? Encryption of sensitive data is freely available. When the data gets stolen, it would not contain the sensitive data, since that would be in a non-readable format. It is a liability for companies to store these incredibly large amounts of personal data in centralized locations.