None of my mine come as PDF attachments, it’s always “click here to see your statement” which goes through the login process to the company’s portal. I get it, they think they’re doing it for security. But email is no less secure than paper mail and they send paper statements in regular mail, so why not email?