> I'm baffled how it's not secure.

Our civilisation needs to face up to the fact the reason is simply: its stored on a connected computer.

Too much is stored in computers. In the EU, you own the data about yourself. In the US, whoever owns the computer owns all the data on that computer - you own nothing and you will love it. We need to make PII radioactive and fine everyone who had that data stored on their computer when it leaked.