Card security sucks

Got a replacement credit card recently. Using the contents of the single postal package and two very easily obtainable pieces of information about me, I managed to activate it, view my PIN and change my statement delivery to paperless. Fortunately, I am me. Had that post gone astray, it would have been too easy for someone to have run up a large bill!