Comment by xgulfie

Yes. It's more secure to have your website simply not require the user's SSN than to implement the best security in the world to handle their SSN.