ithinkthimgs

That is criminally poor. The most likely point of failure in most bank accounts nowadays is not the bank, it's the online banking portal. 8 characters is stupidly poor for potentially complete access to your bank account.

I hope they insist you use one of those card readers too.

I think the assumption is that you would check the source code before executing it.