I mostly agree. Two nuances: - they will assure you that the PIN re-issuing process is completely automated, and no employee has the authority to actually read

I mostly agree. Two nuances: - they will assure you that the PIN re-issuing process is completely automated, and no employee has the authority to actually read your PIN; nice touch, but you still have to take their word for it - they will immediately block your card whenever you request it So I think the most common rationale about this is along the lines of: 1. Some clients will inevitably compromise their PIN 2. Thus we need the system to be very good at dealing with compromised PINs 3. So we do not need to be extra careful about PINs, because we are good at handling compromised PINs Do not forget they are bank. Their main and unique goal is PROFIT. Nothing else matters, they only see the financial aspects of things.