As I said, it's for my bank, so it's my card pin - I already need to remember it.
Also as I said - this was much less of an issue when companies maintained IT departments and installed software. It's much easier to verify that Julie on the phone really is Julie when it's an internal support mechanism.