Up until very recently, AT&T forced me to have a "four digits" password to login on their website (prepaid phone).

That's how secure I see phones.