I think this idea is good.

I think Steemit should add pin/password to the transaction page. Without password/pin its easy for someone to transfer from another person's wallet provided that he/she was able to handle the account owner's phone or computer.

Exactly. Most people just save their active key on their phones, which is why the objection

your suggestion is not valid, after the page to fill in the details another page pops up and ask to input your steemit password i think that is more than secure

missed the point. Anybody takes their phone and there is little they can do about it, other than rush home and on another device change their password.

The option for a pin should be there, the pin being resetable by changing the password, I think.