We spoke a bit about it in the Telegram group a while back and it was generally agreed that the pin should be imutable. Email back up would remove the security benefits for other users, SMS/Whatsapp backup is expensive and impossible (currently) to roll out globally.
I know it’s frustrating for anyone that’s lost it but it’s going to be a familiar number. I can’t imagine anyone would use a completely random number that they haven’t recorded somewhere safe. The network allows 3 guesses per six hour period.
We don’t have the man power currently to do individual support and recovery based on ID checks for lost pins but this might become an option in the future for anyone that has funds sitting in an account with no access.
It’s not possible to set up a pin number without logging in to the account first with username and password. So for someone else to setup a pin on your account they would first need username, password and 2fa if you have that enabled.
If a pin isn’t set up on the account you will get notified to set one up when you log in at https://platform.jsecoin.com after about 10 seconds of logging in.