In theory there are lots of ways they could secure the data, my point was that in the non-theory real world most online companies fall way short of good practic

In theory there are lots of ways they could secure the data, my point was that in the non-theory real world most online companies fall way short of good practices for data security. This is why barely a day can go by these days without some some story popping up on HN about "Company XYZ was hacked, customer data exposed".