New research shows vulnerabilities in popular cold-storage options that would have revealed their PINs.