Agreed. However, United still has very glaring security issues with their site that go far beyond the 4 digit PIN. I can't provide concrete details because I still have a pending bug bounty report, but stuff along the lines of bad/missing HTTPS and easy hijacking of account management sessions.