On the one hand, not great. On the other, what can someone do with access to your PIA account? I don't think that gives them any ability to snoop on your traffic, and there's no user data in the account for them to steal.
They could mooch off your access within the 5 device limit, or sign in online and pay your bill?