Title seems quite linkbaity. In a 4digit PIN-based system, being able to log in with a 4 digit PIN isn't a vuln, it's how the system works.

They even state up-front that improvements to the system are in the works.