The Indian security company that used 4 as a private key also lacks basic account security.
To sign into your account, you enter your email and receive a 4 digit code.
There are no limits on login attempts. You can try all 10,000 combinations.
The Indian government uses this.