All personally identifiable data should be stored in a non usable form. You'd think people by now would know that eventually your data will leave your protection.
I believe that he's implying they would be hashed just like your password and used solely for verification with another system (like transaction authorization).
I don't think hashing an address is a very good way to store it, recovery might take a while.
Likely the poster means person information. Name, date of birth, address, back up email, phone number should be encrypted. Even just using the users password as a key would be better then clear text.
It wouldn't be difficult, but a bandage is better then leaving a gaping wound. Yes it would be better store a second salt and do a scrypt style password generation.
