Brute forcing your way into a PIN (4 digits especially) isn't hard for someone who can compromise your account. See: people brute forcing into iOS lockscreens