If you had my Subway password (and the email address I gave them, which is not my regular address) and could sign into my account you'd get my name, full address and birthday. As well as my free sandwich. So I should be pleased they are taking security seriously.

Back in the days when I used to dash through Reading station on the way to dance practice, I ate at Subway sufficiently frequently that the rewards were actually pretty good value. Nowadays I do it so infrequently it probably isn't worth bothering.