Face ID, biometric scans, and multi-factor authentication—it's surprising that ATMs still rely on a simple 4-digit PIN.