If that's really all the security they have, it's kinda bad, but it does encourage the right attitude for early bitcoin adopters, which is only put as much bitcoin in any online wallet as you would in your actual wallet.
It's not the only security. In short there's a rate-limited pincode, 2FA, spending limits plus a password for your vault, and they offer insurance against lost bitcoins that you didn't cause.