The credentials you use to validate your account to a person shouldn't be the credentials you use to validate your account to the system.
Then again, the credentials you use to validate your account should NEVER be a 4-digit number, so given United hasn't figured that out yet....