A bank in India has sent me a bank statement email (meant to be sent to their customer). Ignore that they sent potentially sensitive information to a stranger. The statement pdf is password protected. And the email says the password is first 4 letters of his name and last 4 digits of the account number. Both the name and account number are given in the email. Q. So what did the password achieve? A. Bank grade security!