The only security with a bank pin is that it will take 3 or 7 days to be removed. That's how it has been since the start, I assume with the assumption that the account creator can recover the account in that time.
Adding email shouldn't result in additional security, because through the authenticator email access should already be required to log in to the account. A hijacker would have access to the email if he can log in and access the bank system.
You will never get anything for free. Anyone claiming that is trying to scam, lure or hijack you.
Twitter:
@Hugopluks13
|| Currently playing on:
Rhydon
|| Dutch
11-Jul-2018 10:07:16