I just wish I had the choice to have a password rather than a 4 character number. If a user chooses to set a weak password they can take that risk themselves, but, for users like myself who chose strong passwords (by my standards anyway!), I'd like to be able to secure my account properly.

If we wanted to go one step further, IHG could start using two step authentication. Although annoying at times, it's nice to have that additional level of protection. Could even just use 2FA just for redemption or changes to account (similar to banks).