Similarly, relying only on the simple four-digit PIN number, but no physical token, would be absolutely horrible.