It's a trade off. If someone wanted they could keep reducing security to improve the user experience, but a product having bad security will be problematic.
>Anyone could just look it up.
Most people's SSNs have already been leaked or stolen so it's just security theater to pretend they are still private information.
