A considerable part of the security risk is inherent in giving people a number which is directly linked to a bank account where you keep all your money. (money.stackexchange.com)
It is the subject of thousands of research papers including those who looked at groups of people number in the hundreds of thousands. (nutritionfacts.org)