there's no reason to believe that anyone is cracking UA accounts by guessing PINs.
Agreed, but it has the potential for hacking or other mischief. My AA, DL, OZ, KE, CS, US, etc. passwords can be alphanumatic and long (which they are). It is the PIN access that is a problem.