I don’t think your father is wrong to ask about ways to insure the confidential information is stored in a safe way. I know my daughter’s school takes what info they need and shreds the docs immediately. If people include info that isn’t requested, it is shredded. When I fax or email stuff, it goes to a person and not a general number.
Sometimes they only want the first two pages of tax returns, sometimes only certain schedules.