Sadly, I believed you'll be talking to the wrong people there. They'll wrongly assume they're safe as houses and passwords are safe, but in reality you're speaking to the Marketing team who think replacing passwords with is safe.

I'm thinking of emailing them directly and asking the tech team.

And if they're not securely encrypted then I too will be taking my services elsewhere. My calls, bank details etc are logged. I don't want potential hackers knowing my parents number so they can target them and everybody else too.