I am just sharing my experience and offering no advice, however my opinion is that MYOB are placing themselves in a very risky predicament regarding litigation if (read when) they have a data breach and have collected unnecessary information on businesses contrary to Australian law. I cannot believe they haven't learnt from the Optus saga and others. AFCA are very helpful and their cases are an easy to navigate process. If you believe any financial services provider is not acting lawfully or reasonably, I would suggest talking to them.