A bigger problem than banks using 8 character strings as passwords?
Unless you write down that password or use it elsewhere, that can be considered secret. Compare that to the difficulty of sampling someone's voice by simply eavesdropping.
8? When did they double it? And since when can I use anything but digits? /s