My one complaint, and the thing which forces me to use a competitor instead, is that there's no pin protection on entering the app, which I find quite unbelievable.
Personally I love that this is optional; I already authenticate securely with my phone, so it seems weird to mandatorily require an additional authentication step.
Making it mandatory (or strongly pushing it) greatly increases the level of trust people have in your company. The data suggests it is a worthwhile convenience trade-off.