We have come to the same conclusion.  This is a critical area with all the information hackers would need.  With all the safety precautions.  I find it hard to believe that Intuit has left such a  vuneable area open to scammers when a simple password would protect such sensitive information.