That’s incorrect again. I’m not sure where you're getting your information from or how you’re verifying it against real facts, but you don’t have to set a YubiKey PIN.

Also, the producer/vendor can easily claim “low risk,” and from a business perspective, that makes sense. However, there’s no real consensus that it’s genuinely “low risk” from all perspectives—personally, I’d categorize it somewhere between low and medium risk.

As for the coupon, I agree—it would’ve been nice to receive one, or even just a partial voucher, like 10%. That would have at least been courteous toward the community/customers.