What’s the lesson here? That software is insecure? Or that you shouldn’t trust your friends? Sad.
All of the above, plus, maybe, don't let people see you put in your pin.
don't take security for granted. Be careful.
I guess the lesson I learned is you need to pay attention to security.