Hours? Brute forcing to guess even a six digit pin (as in my bank) takes barely a few seconds by writing some code.

But, please tell me, which bank exposes the entire account balance via automated, kyc free and memory less api call containing only a pin?