Adding a password will be safer, but to be honest, at present, many places can swipe their cards with a password.

In addition, many banks have a 24-72-hour card loss guarantee, that is, your non-personal consumption can be exempted for a certain period of time before reporting the loss. So it's not that dangerous without a password.