On an unregistered browser, someone has to guess the answer to two security questions and the PIN. Did it occur to you that maybe it's not a problem since it's been that way for at least 8 years now (I signed up in 06)?