... I am one of those people who use their birthday and STILL forget the password! When I was working my access level to company information demanded I have one of those 10 digit strong passwords with upper, lower case, and numbers... plus the password had to be changed every 60 days to another that had never been used.... I had to have my password reset EVERYTIME I needed access! So, I like everybody else put it on a 'post-it-note' on the front of my computer... the complex password caused everyone to MAKE IT EASIER by writing it on the front of the computer! I would argue the point and always got shot down, when I retired, little yellow 'post-it-notes' were still on everyone's computer! BUT I ADMIT YOU ARE 100% RIGHT.

On the other hand, look how fast Paypal corrected (refunded) the problem. Someone once charged $5,200.00 on my MasterCard and THEY called ME and deleted every charge. So WHY would I ever change? I feel SAFE if someone were to get my number (I did change numbers afterward). Looks like Paypal does the same thing to make you feel secure. It's only when a loss is not recoverable that scares me.