There is a gov.br and digital certificate option, but they are not mandatory.

> the receipt numbers of my last 2 annual tax forms, which are very secret and somewhat in line with the scope of permissions I got

I see.

I wouldn't call them "very secret". All of my accountants have access to this information, as do several of my family members. I wouldn't be surprised if those things eventually leaked in some government breach either.