I fear signal has to be mentioned a thousand times from all directions before they "trust" it.
Yes. A thousand times yes. The risk profiles humans naturally adapted to are not well aligned with the artificial risk profiles we see today. I can't fault someone for not transcending their own natural instincts, because heaven knows I can't.
If it's used as an identifier to link together rows from different tables. Also known as "joining" tables. SSN (with birthdate) is a unique identifier, and so it's natural to choose as a primary/foreign key.