I emailed a pdf of a bank statement to a small number of board members of a small volunteer organization. The account has additional security measures on it which include requiring two signatories on all withdrawals or account changes. Another board member, who is in IT, wants to go to the trouble of changing the bank account number (a hassle for us) and insists this was a high security breach. One link she sent to us all explained the risks of plain text. The account number was not in plain text, but a pdf. The link also used high risk million dollar transactions as an example of what could go wrong ie: at the last moment before depositing your millions a hacker could change one number and the money would be deposited into the wrong account. The bank fraud department and others I've reached out to think this is excessive, as do I. She also referred to a Q&A on this site to support their argument.
Additional thoughts? Or, is this a little like crying fire in a crowded theatre?