A bigger problem than banks using 8 character strings as passwords?
8? When did they double it? And since when can I use anything but digits? /s
Unless you write down that password or use it elsewhere, that can be considered secret. Compare that to the difficulty of sampling someone's voice by simply eavesdropping.