[tinsmith]

This seems like a remarkable oversite on BofA's part. I'm with a comparitively tiny US credit union, and even their app demands a pin code to return to it if I switch to another app mid-session.