All information on users is readable in the database. According to various GDPR official bodies, personal data needs to be encrypted so that in the event the database is stolen, nobody can read it.
Are you planning to implement this?
.
Honestly, this is something which we won't be able to support for. From what I see, none of extensions (even Joomla core extensions) ever encrypt users data