The flipside is an IP address which for users often changes is less of a security risk than someone knowing some personally linked data like a phone number, address or email that you use consistently.

You seem to be arguing for the sake of it and missing the point entirely.