Ignoring the fact it isn't tax evasion - just because it's against the law, doesn't mean it's unethical. Further, obeying laws can be (and often is) unethical. Not everything is on the level of requiring people to turn in jews, but there's plenty of room to argue that companies that are ill-equipped to protect your personal data should not be allowed, much less required, to collect your identifying information.