Imagine signing in the hacker news with only a username and no password... That's what credit card numbers are. Passwords / pins aren't even a good solution either: some sort of pki/cryptographic signatures are.