SSN should just be considered public information at this point. It’s not secret so it cannot be treated as a password and it’s not even suitable as an identifier. It’s purpose is for tracking earnings, not identifying a person.
I mean, that is why they exist, to replace names, or perhaps more accurately act as a surrogate key for names. The government specifically said don't use the SSN as a secret, and businesses did so anyway.