Regarding the first observation, the real threat is the appearance of not taking the collection and retention of the data seriously.

Regarding the second observation, I would love to know how to incorporate public key crypto into a database front-end - specifically one made in MS Access. That would be the preferred option to a hash+rainbow table by a long chalk.