before the PIN, people had their accounts drained all the time, then we made you wait a week and incidents of theft went to near zero. 72 hours is a good compromise I think. don't forget your PIN!